185.65.120.166📋 Copy

# IP Intelligence Briefing: 185.65.120.166/32

Classification: Low Risk

Date: 2026-07-29

Analyst: IPDebrief Intelligence

## Executive Summary

IP address 185.65.120.166 is classified as Low Risk with a risk score of 0. The address belongs to Teleklik (AS201719), a RIPE-registered network infrastructure provider operating in Bosnia and Herzegovina. No malicious threat indicators, blacklisting, or abuse activity detected.

## Ownership and Registration

• Organization: TELEKLIK-MNT
• Netname: Teleklik
• ASN: 201719
• CIDR Block: 185.65.120.0/24
• RIR: RIPE (Europe, Middle East, Africa)
• Abuse Contact: Available via RDAP

## Geolocation

• Country: Bosnia and Herzegovina (BA)
• Region: Republika Srpska
• City: Banja Luka
• Coordinates: 44.78°N, 17.2°E
• Geo Validation: Single-source consensus; geoPlausible flag: false

## Network Classification

• Service Purpose: Web Server
• Infrastructure Type: Standard hosting infrastructure
• Proxy/VPN/Tor: Negative (not identified as proxy, VPN, Tor, or hosting provider)
• Cloud/CDN: Negative
• Bogon: Negative

## DNS and Services

• PTR Record: plesk.bentoproduct.ba
• Forward Resolution: bentoproduct.ba (1 hostname)
• TLS Certificate: Issued by Sectigo Public Server Authentication CA DV R36, O=Sectigo Limited, C=GB
• Certificate Subject: *.bentoproduct.ba, bentoproduct.ba
• HTTP Server: nginx (HTTP/2 enabled)
• Open Ports: 80/tcp (HTTP), 443/tcp (HTTPS), 8443/tcp (HTTPS-alt)
• Email Authentication: SPF and DMARC records present
• DNSSEC: Valid

## Threat Intelligence

• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Null
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: Empty
• DNSBL Listed: 0 out of 8 lists
• Is Known Attacker: False
• Is Spam Source: False
• Is Tor Exit Node: False

## Historical Activity

Observation Count: 18 signals recorded

Most Recent: 2026-07-29

Key historical signals include:

• Network type classification (confidence: 0.30)
• Geolocation data (confidence: 0.70)
• HTTP/HTTPS fingerprinting (confidence: 0.85)
• Ownership and persistence analysis (confidence: 0.80)
• Banner and certificate matching (confidence: 0.30)

No persistent malicious activity detected. Threat observation count remains at 0.

## Neighborhood Analysis

• Subnet: 185.65.120.0/24
• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0

No neighboring IPs in the /24 subnet flagged for abuse or threat activity.

## Relationships

• Network Associations: Multiple entries to Teleklik (AS201719)
• DNS Associations: plesk.bentoproduct.ba (Plesk hosting management system)

## Security Actions

Recommendation: No immediate action required. Risk score of 0 indicates no active threats.

Suggested Firewall Policy:

• Allow traffic to/from this IP for legitimate web service communication
• Monitor for any changes in behavior patterns
• No blocking recommended

## Assessment

This IP address represents legitimate web hosting infrastructure associated with the bentoproduct.ba domain. The Plesk management hostname (plesk.bentoproduct.ba) and Sectigo-issued TLS certificates indicate a standard business web presence. No malicious indicators, abuse reports, or threat intelligence signals have been identified. The IP should be treated as benign for security operations.

Status: Monitor - No Action Required

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.