192.229.85.21📋 Copy

## IPDEBRIEF INTELLIGENCE BRIEFING

Target: 192.229.85.21/32 | Classification: LOW RISK

Generated: 2026-07-29

EXECUTIVE SUMMARY

IP 192.229.85.21 is classified as low risk with a risk score of 0. The address belongs to ANTBOX NETWORKS LIMITED (ASN 138995) within CIDR block 192.229.80.0/20. No active threat indicators, blacklist listings, or malicious activity detected. Recommended action: Monitor but no immediate blocking required.

OWNERSHIP & NETWORK CLASSIFICATION

• Organization: ANTBOX NETWORKS LIMITED
• Network Name: ANTBOXNETWORK-01
• ASN: 138995
• CIDR: 192.229.80.0/20
• RIR: ARIN
• Geolocation: US (Denver, CO) | Timezone: America/Denver
• Classification: Firewalled / No Services
• IP Type: Not Cloud, CDN, VPN, Proxy, Tor, or Hosting

THREAT INTELLIGENCE

• Risk Score: 0/100
• Abuse Confidence: Not applicable
• Blacklist Status: Clean (0 listings across 8 monitored sources)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Threat Indicators: None detected
• Associated Campaigns: None identified

NETWORK SERVICES

• Open Ports: None detected
• DNS Records: No PTR hostnames, no forward resolution
• Email Auth: No SPF/DMARC records configured
• HTTP Services: No active web services

NEIGHBORHOOD ANALYSIS (192.229.85.0/24)

• Subnet Abuse Density: 0 (Low)
• Total Siblings: 1
• Neighbor Risk Profile:

- 192.229.85.149: Risk Score 25 (Low-Moderate)

• Inherited Risk: 0
• Active Threat Siblings: 0

OBSERVATION HISTORY (Last 10 Signals)

• DNSSEC Status: Valid
• Geolocation Consistency: Inconsistent (US Denver vs. Singapore reported in historical data)
• Threat Persistence: 0 days
• Ownership Changes: 0
• Notable Observation: 2026-07-29 08:48:52 UTC – Geographic probe reported Singapore location (geolite2), conflicting with primary US registration

RELATIONSHIP GRAPH

• Connected Entities: 2 (both network-level: ANTBOXNETWORK-01)
• Certificate Associations: None
• Hostname Associations: None

RECOMMENDED ACTIONS

Based on current risk profile (Score: 0), no immediate firewall rules or blocking actions are recommended. The IP shows no malicious behavior, has no active services, and maintains a clean reputation across threat intelligence feeds.

SOC Analyst Notes:

• The subnet maintains low abuse density (0), indicating legitimate operational use
• Geographic inconsistency between US registration and Singapore probe warrants passive monitoring but does not indicate compromise
• No actionable intelligence suggesting this IP should be blocked or flagged as malicious
• Continue standard traffic monitoring; no elevated priority required

---

*Data Source: IPDebrief Intelligence Platform | Classification: Defensive Security Intelligence*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.