# IP INTELLIGENCE BRIEFING: 185.226.78.90/32
## Executive Summary
Analysis of IP 185.226.78.90 indicates LOW RISK classification with no active threat indicators. The IP shows minimal operational signals and no evidence of malicious activity in the IPDebrief database.
---
## Risk Profile
| Metric | Value |
|---|---|
| Overall Risk Score | 0 |
| Provider Score | 0 |
| Authority Score | 0 |
| Stability Score | 0 |
| Blacklist Count | 0 |
| Reputation | Low Risk |
---
## Technical Profile
- Geolocation: London, United Kingdom (GB)
- ASN: Not assigned / Null
- Organization: CBIZZ-MNT (RIR: RIPE)
- Network Role: Firewalled / No Services
- CIDR Block: 185.226.78.0/23
- Abuse Contact: abuse@cbizz.nl
---
## Network Characteristics
- Open Ports: None detected
- DNS Resolution: No PTR hostnames, no forward resolution
- SSL/TLS: No certificates detected
- HTTP/HTTPS: No active web services
- Mobile/Proxy/VPN: Not detected
---
## Threat Indicators
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Threat Feeds: None
- Campaigns: None associated
- Active Attacker Status: No
---
## Behavioral Analysis
- Honeypot Hits: 0
- WAF Violations: 0
- Enumeration Strikes: 0
- Total Incidents: 0
- Persistence: No persistent malicious activity observed
---
## Observation History
Six historical observations recorded (July 2026 timeframe). Key signals include:
- Ownership registration under CBIZZ-MNT
- RIPE RIR registration for 185.226.78.0/23
- Geolocation signals showing NL (Hardinxveld-Giessendam) and GB (London) routing paths
- Transit network involvement (Cogent)
- No escalation in threat signals over time
---
## Neighborhood Analysis
- Subnet: 185.226.78.0/24
- Abuse Density: 0%
- Total Neighbors: 0
- Threat Siblings: 0
- Active Siblings: 0
---
## Relationship Graph
No external relationships detected (related hostnames, organizations, or certificates).
---
## Recommended Actions
No security actions recommended. The IP presents minimal risk with no firewall rules required. If traffic from this IP is observed:
- Allow standard traffic unless specific policy requires blocking
- No additional monitoring required based on current threat intelligence
- Consider geolocation inconsistencies (NL/GB routing) in traffic analysis
---
## Intelligence Confidence
- Overall Confidence: Low (insufficient data for definitive classification)
- Data Sufficiency: Limited
- Temporal Persistence: No persistent malicious signals
---
Report Generated: Current
Status: Monitor – Low Risk
Action: Allow with standard logging
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | CBIZZ-MNT |
| ASN | AS30925 |
| Network Name | CBIZZ-ACCESS |
| CIDR Block | 185.226.78.0/23 |
| RIR | RIPE |
| Country | NL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS30925 |
| Network Prefix | 185.226.76.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 09:43:07 UTC |
| Last Seen | 2026-09-02 22:29:35 UTC |
| Profile Built | 2026-09-02 22:45:05 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 185.226.78.90
Who owns the IP address 185.226.78.90?
185.226.78.90 is registered to CBIZZ-MNT. The address falls within the 185.226.78.0/23 network block. Registration is held at RIPE.
Where is 185.226.78.90 located?
Geolocation data places 185.226.78.90 in London, South Holland, United Kingdom. The local time zone is Europe/London. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 185.226.78.90 malicious or safe?
185.226.78.90 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 185.226.78.90?
Responsive ports observed on 185.226.78.90 include 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.