185.198.243.172📋 Copy

# IP Intelligence Briefing: 185.198.243.172/32

## Executive Summary

Intellectual property address 185.198.243.172 is classified as Low Risk with a risk score of 25. The IP is assigned to VPN Consumer in London, United Kingdom (ASN 62240) and is associated with the LONDON-GB-185-198-243-0 CIDR block. No active threat indicators were detected, and the IP shows no open services or known malicious activity.

## Network Classification & Ownership

• ASN: 62240
• Organization: VPN Consumer London, United Kingdom
• Network Name: LONDON-GB-185-198-243-0
• CIDR Block: 185.198.243.0/24
• Geolocation: London, England, GB (coordinates: 53.86°N, 0.63°E)
• Network Role: Firewalled / No Services
• Classification: Not identified as CDN, Cloud, VPN, Proxy, Tor, or Hosting infrastructure

## Threat Assessment

• Reputation: Low Risk
• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 total listings
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: No active threat indicators

Control Plane Analysis:

• DNSBL Listings: 1 listing out of 8 total DNSBLs
• Operator Score: 0.1304 (Minimal)
• Route Stability: False
• RPKI State: Not applicable
• IRR Consistency: Not applicable

## Service & Port Analysis

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Banner Grab: None
• Email Authentication: No SPF, DMARC, or TXT records detected

## Behavioral Observations

Recent Activity (Last 13 Observations):

• Most recent observation: 2026-07-29T02:21:21 UTC
• One observation noted DNSBL listing with high severity
• Geolocation inference: GB with 40% confidence
• Overall observation confidence: Low (0.17 average)

Historical Persistence:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 0
• Persistently Malicious: False

## Neighborhood Analysis (185.198.243.0/24)

• Total Siblings: 41 IPs in /24 subnet
• Abuse Density: 0
• Risk Distribution: 33 low risk, 0 medium, 0 high
• Risk Score Range: 0–25 (multiple IPs with score of 25)
• Authority Score: Consistently 50 for neighbors with data

Notable high-risk neighbors within the same /24 include:

• 185.198.243.88 (Risk: 25)
• 185.198.243.91 (Risk: 25)
• 185.198.243.113 (Risk: 25)
• 185.198.243.122 (Risk: 25)
• 185.198.243.125 (Risk: 25)
• 185.198.243.154 (Risk: 25)
• 185.198.243.155 (Risk: 25)
• 185.198.243.156 (Risk: 25)
• 185.198.243.161 (Risk: 25)
• 185.198.243.166 (Risk: 25)
• 185.198.243.187 (Risk: 25)

## Relationship Graph

• Same Network Relationships: LONDON-GB-185-198-243-0 (2 relationships)
• No: Organization, hostname, certificate, or IP-to-hostname mappings detected

## Recommended Actions

No specific security actions or firewall rules were generated due to the low-risk classification. However, given the presence of a single DNSBL listing and the subnet's abuse density context, analysts should:

1. Monitor: Continue monitoring for new threat indicators or service changes

2. Contextual Analysis: Compare against the subnet's 41 neighbors to identify patterns

3. Correlation: Investigate any traffic anomalies from this IP against known threat campaigns

## Traceroute Analysis

• Hop Count: 16
• First Hop RTT: 0.2ms
• Last Hop RTT: 102.8ms
• Timed Out Hops: 1
• Transit Networks: Comcast, NTT

---

*Report generated from IPDebrief intelligence platform. All data represents observed signals as of the latest collection timestamp.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.