IP 185.56.65.168/32 was associated with ASN 202021 (t2oe-emea-mnt) under the RIPE NCC registry. Geolocation data indicated coordinates consistent with the Netherlands, though one source listed New York. The address resided in a clean neighborhood with zero abuse density and no threat siblings. Passive scans detected no open ports, classifying the host as firewalled. While the overall risk score remained Low (25), the IP listed on one DNS blacklist among eight sources checked. Behavioral logs showed zero honeypot hits, enumeration strikes, or WAF violations. Observation timestamps ranged from 2026-09-06 to 2026-09-20. No specific campaigns or threat indicators were identified. The recommendation was Monitor with Low severity due to the clean subnet status and lack of active attack indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🔍 21 signal types · 164 observations collected
This report is generated from 21+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
