# IP Intelligence Briefing: 185.200.116.219/32
Date: Current Analysis
Classification: Low Risk / No Active Threat Indicators
---
## Executive Summary
IP address 185.200.116.219 is a low-risk infrastructure endpoint belonging to M247-LTD-Singapore (ASN 9009). The IP shows no active threat indicators, no open services, and is classified as clean within its /24 subnet. No immediate defensive action is required.
---
## Ownership and Geolocation
| Field | Value |
|---|---|
| **ASN** | 9009 |
| **Organization** | GLOBALAXS-MNT (M247-LTD-Singapore) |
| **CIDR Block** | 185.200.116.0/24 |
| **Country** | Singapore (SG) |
| **RIR** | RIPE |
| **Abuse Contact** | abuse@m247.ro |
---
## Risk Assessment
| Metric | Value | Assessment |
|---|---|---|
| **Overall Risk Score** | 25 | Low Risk |
| **Provider Score** | 0 | N/A |
| **Authority Score** | 0 | N/A |
| **Blacklist Count** | 0 | Clean |
| **Known Attacker** | No | Not flagged |
| **Tor Exit Node** | No | False |
| **Spam Source** | No | False |
| **Abuse Confidence** | N/A | Not scored |
---
## Network Role and Services
- Infrastructure Type: Firewalled / No Services Detected
- Cloud Provider: No
- CDN: No
- VPN: No
- Proxy: No
- Hosting: No
- Mobile/Residential: No
- Anycast: No
- Open Ports: None detected
No TLS certificates, HTTP banners, or service responses observed.
---
## DNS and Control Plane
| Parameter | Value |
|---|---|
| **Reverse DNS** | 219.116.200.185.in-addr.arpa |
| **Forward Resolution** | Not confirmed |
| **Hosted Domains** | None |
| **DNSBL Listings** | 1 of 8 lists |
| **Route Stability** | False (route changes detected) |
| **DNSSEC** | Valid |
| **Hop Count** | 12 hops |
---
## Neighborhood Analysis (185.200.116.0/24)
| Metric | Value |
|---|---|
| **Abuse Density** | 0 (Clean) |
| **Total Siblings** | 4 |
| **Active Siblings** | 2 |
| **Threat Siblings** | 0 |
| **Risk Distribution** | 0 High, 0 Medium, 3 Low |
Known Neighbors:
- 185.200.116.131: Risk 0, Authority 50
- 185.200.116.203: Risk 25, Authority 50
- 185.200.116.211: Risk 25, Authority 50
---
## Historical Signals
Total Observations: 17 signals recorded
Recent Activity: 2026-07-29 (most recent)
Ownership Changes: 0
Threat Persistence Days: 0
Persistently Malicious: No
Observed signals include network role classification, DNS associations, provider information, and subnet classification. No escalation in threat posture detected.
---
## Relationships
- Network Association: M247-LTD-Singapore (repeated)
- DNS Associations: 219.116.200.185.in-addr.arpa (reverse DNS entries)
- No malicious relationships to organizations, hostnames, or certificates detected.
---
## Recommended Actions
Current Status: No action required. The IP is classified as low risk with no active threat indicators.
Monitoring Recommendation: Continue passive monitoring. The subnet shows no abuse density, and the IP itself has no open services or blacklisting.
Firewall Rules: None recommended. Standard allow rules may be applied if legitimate traffic is expected.
---
## Intelligence Narrative
IP 185.200.116.219 is a passive infrastructure endpoint under M247-LTD-Singapore's management in Singapore. The address shows no evidence of malicious activity, with zero blacklist hits and no open ports or services. The /24 subnet maintains a clean profile with zero abuse density and no threat-adjacent siblings. Historical signals indicate stable ownership with no persistence indicators. The IP does not require defensive mitigation and may be considered benign for SOC monitoring purposes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | GLOBALAXS-MNT |
| ASN | AS9009 |
| Network Name | M247-LTD-Singapore |
| CIDR Block | 185.200.116.0/24 |
| RIR | RIPE |
| Country | SG |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 219.116.200.185.in-addr.arpa |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 219.116.200.185.in-addr.arpa |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-22 13:24:00 UTC |
| Last Seen | 2026-08-01 16:33:20 UTC |
| Profile Built | 2026-07-29 13:55:03 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.