# 185.198.243.172 — IP Intelligence Summary

185.198.243.172 is an IPv4 address operated by VPN Consumer London, United Kingdom (AS62240), geolocated to London, United Kingdom. As of September 3, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/185.198.243.172
- Last updated: 2026-09-03

## Ownership

- Organization: VPN Consumer London, United Kingdom
- Network name: LONDON-GB-185-198-243-0
- Allocated block: 185.198.243.0/24
- ASN: AS62240 (https://ipdebrief.com/asn/62240)
- Regional registry: RIPE

## Location

- City: London
- Region: England
- Country: United Kingdom
- Time zone: Europe/London

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 185.198.243.172/32

\## Executive Summary

Intellectual property address 185.198.243.172 is classified as Low Risk with a risk score of 25. The IP is assigned to VPN Consumer in London, United Kingdom (ASN 62240) and is associated with the LONDON-GB-185-198-243-0 CIDR block. No active threat indicators were detected, and the IP shows no open services or known malicious activity.

\## Network Classification & Ownership

\- **ASN:** 62240

\- **Organization:** VPN Consumer London, United Kingdom

\- **Network Name:** LONDON-GB-185-198-243-0

\- **CIDR Block:** 185.198.243.0/24

\- **Geolocation:** London, England, GB (coordinates: 53.86°N, 0.63°E)

\- **Network Role:** Firewalled / No Services

\- **Classification:** Not identified as CDN, Cloud, VPN, Proxy, Tor, or Hosting infrastructure

\## Threat Assessment

\- **Reputation:** Low Risk

\- **Abuse Confidence Score:** Not applicable

\- **Blacklist Status:** 0 total listings

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Threat Feeds:** No active threat indicators

**Control Plane Analysis:**

\- **DNSBL Listings:** 1 listing out of 8 total DNSBLs

\- **Operator Score:** 0.1304 (Minimal)

\- **Route Stability:** False

\- **RPKI State:** Not applicable

\- **IRR Consistency:** Not applicable

\## Service & Port Analysis

\- **Open Ports:** None detected

\- **TLS Certificate:** None

\- **HTTP Title:** None

\- **Banner Grab:** None

\- **Email Authentication:** No SPF, DMARC, or TXT records detected

\## Behavioral Observations

**Recent Activity (Last 13 Observations):**

\- Most recent observation: 2026-07-29T02:21:21 UTC

\- One observation noted DNSBL listing with high severity

\- Geolocation inference: GB with 40% confidence

\- Overall observation confidence: Low (0.17 average)

**Historical Persistence:**

\- Ownership changes: 0

\- Threat persistence days: 0

\- Threat observation count: 0

\- Persistently Malicious: False

\## Neighborhood Analysis (185.198.243.0/24)

\- **Total Siblings:** 41 IPs in /24 subnet

\- **Abuse Density:** 0

\- **Risk Distribution:** 33 low risk, 0 medium, 0 high

\- **Risk Score Range:** 0–25 (multiple IPs with score of 25)

\- **Authority Score:** Consistently 50 for neighbors with data

Notable high-risk neighbors within the same /24 include:

\- 185.198.243.88 (Risk: 25)

\- 185.198.243.91 (Risk: 25)

\- 185.198.243.113 (Risk: 25)

\- 185.198.243.122 (Risk: 25)

\- 185.198.243.125 (Risk: 25)

\- 185.198.243.154 (Risk: 25)

\- 185.198.243.155 (Risk: 25)

\- 185.198.243.156 (Risk: 25)

\- 185.198.243.161 (Risk: 25)

\- 185.198.243.166 (Risk: 25)

\- 185.198.243.187 (Risk: 25)

\## Relationship Graph

\- **Same Network Relationships:** LONDON-GB-185-198-243-0 (2 relationships)

\- **No:** Organization, hostname, certificate, or IP-to-hostname mappings detected

\## Recommended Actions

No specific security actions or firewall rules were generated due to the low-risk classification. However, given the presence of a single DNSBL listing and the subnet's abuse density context, analysts should:

1. **Monitor:** Continue monitoring for new threat indicators or service changes

2. **Contextual Analysis:** Compare against the subnet's 41 neighbors to identify patterns

3. **Correlation:** Investigate any traffic anomalies from this IP against known threat campaigns

\## Traceroute Analysis

\- **Hop Count:** 16

\- **First Hop RTT:** 0.2ms

\- **Last Hop RTT:** 102.8ms

\- **Timed Out Hops:** 1

\- **Transit Networks:** Comcast, NTT

\---

*Report generated from IPDebrief intelligence platform. All data represents observed signals as of the latest collection timestamp.*

## Nearby addresses

- 185.198.243.25 (https://ipdebrief.com/185.198.243.25)
- 185.198.243.44 (https://ipdebrief.com/185.198.243.44)
- 185.198.243.46 (https://ipdebrief.com/185.198.243.46)
- 185.198.243.47 (https://ipdebrief.com/185.198.243.47)
- 185.198.243.48 (https://ipdebrief.com/185.198.243.48)
- 185.198.243.51 (https://ipdebrief.com/185.198.243.51)
- 185.198.243.60 (https://ipdebrief.com/185.198.243.60)
- 185.198.243.61 (https://ipdebrief.com/185.198.243.61)
- 185.198.243.78 (https://ipdebrief.com/185.198.243.78)
- 185.198.243.88 (https://ipdebrief.com/185.198.243.88)
- 185.198.243.91 (https://ipdebrief.com/185.198.243.91)
- 185.198.243.113 (https://ipdebrief.com/185.198.243.113)

---

Source: IPDebrief, "185.198.243.172 IP intelligence", https://ipdebrief.com/185.198.243.172, updated 2026-09-03. Assessments are probabilistic.
