194.140.115.87
# Threat Intelligence Briefing: 194.140.115.87/32
Date: 2026-07-27
Classification: LOW RISK / MONITORING
Analyst: Automated Intelligence System
IP Address: 194.140.115.87
---
## Executive Summary
IP address 194.140.115.87 presents as a low-risk residential subscriber IP from NetCom BW's dynamic pool. The IP exhibits no active threat indicators, maintains a risk score of 25, and shows no evidence of malicious activity. The address is currently firewalled with no open services detected.
---
## Network Ownership & Registration
| Field | Value |
|---|---|
| **ASN** | 41998 |
| **Organization** | ODR-TKG-MNT |
| **Network Name** | dynamic_subscriber_pool_for_NetCom_BW |
| **CIDR Block** | 194.140.112.0/21 |
| **RIR** | RIPE |
| **Registration Date** | Not available |
---
## Geolocation Data
| Field | Value |
|---|---|
| **Country** | Germany (DE) |
| **Region** | Baden-Wurttemberg |
| **City** | Ehingen |
| **Coordinates** | 51.17°N, 10.45°E |
| **Timezone** | Europe/Berlin |
| **Geo Confidence** | Moderate (400km accuracy radius) |
---
## Risk Assessment
| Metric | Score | Assessment |
|---|---|---|
| **Overall Risk Score** | 25 | Low Risk |
| **Provider Score** | 0 | Minimal Provider Risk |
| **Authority Score** | 0 | No Authority Indicators |
| **Abuse Confidence** | Not Available | Insufficient Data |
| **Reputation** | Low Risk | Clean |
---
## Threat Indicators
Current Status: No Active Threats
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0
- Known Campaigns: None
- Threat Feeds: None
---
## Network Classification
| Attribute | Status |
|---|---|
| **Open Ports** | None Detected |
| **Service Purpose** | Firewalled / No Services |
| **Cloud Infrastructure** | No |
| **CDN** | No |
| **VPN/Proxy** | No |
| **Hosting Service** | No |
| **Mobile Origin** | No |
| **Residential** | Likely (Dynamic Pool) |
---
## DNS & Email Reputation
| Field | Status |
|---|---|
| **PTR Records** | None |
| **Forward Resolution** | Not Confirmed |
| **Hosted Domains** | 0 |
| **SPF Record** | Not Available |
| **DMARC Record** | Not Available |
| **Email Reputation** | Not Assessed |
---
## Control Plane Analysis
| Metric | Value |
|---|---|
| **Origin ASN** | 41998 |
| **BGP Prefix** | 194.140.112.0/20 |
| **Route Stability** | False |
| **DNSBL Listed** | 1 of 8 Lists |
| **RPKI State** | Not Available |
| **IRR Consistency** | Not Available |
---
## Neighborhood Analysis (/24 Subnet: 194.140.115.0/24)
| Metric | Value |
|---|---|
| **Total Siblings** | 4 |
| **Active Siblings** | 3 |
| **Threat Siblings** | 1 |
| **Abuse Density** | 0 |
| **Subnet Classification** | Mostly Clean |
Neighbor Risk Distribution:
- High Risk: 0 IPs
- Medium Risk: 0 IPs
- Low Risk: 4 IPs
Notable Neighbors:
- 194.140.115.90 (Risk: 25, Authority: 50)
- 194.140.115.169 (Risk: 0, Authority: 50)
- 194.140.115.233 (Risk: 25, Authority: 50)
- 194.140.115.243 (Risk: 25, Authority: 50)
---
## Observation History
Total Observations: 15 signals recorded
Recent Activity (Last 24 Hours):
- 2026-07-27 17:25: Subnet classification "mostly_clean" with abuse density 0.2
- 2026-07-27 17:24: Traceroute completed (16 hops, target reached)
- 2026-07-27 17:23: Ownership stability confirmed (0 changes)
- 2026-07-27 17:23: Geolocation inference (DE, Ehingen)
- 2026-07-27 17:21: MaxMind geolocation data (Germany, Baden-Wurttemberg)
Temporal Analysis:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: No
---
## Behavioral Indicators
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
- Total Incidents: Not Available
---
## Recommended Actions
Current Status: No Action Required
Given the low-risk profile and absence of threat indicators, the following actions are recommended:
1. Allow Traffic: No firewall blocking recommended
2. Monitoring: Continue standard monitoring (no special attention required)
3. Alerting: No alerting thresholds triggered
4. Investigation: No immediate investigation warranted
---
## Conclusion
IP address 194.140.115.87 is a low-risk residential subscriber IP from NetCom BW's dynamic address pool. The IP shows no malicious activity, no open services, and maintains a clean reputation. The surrounding /24 subnet demonstrates minimal abuse density. This IP should be treated as benign traffic unless new threat indicators emerge.
Risk Level: LOW
Action: Monitor / Allow
Priority: Low
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ODR-TKG-MNT |
| ASN | AS41998 |
| Network Name | dynamic_subscriber_pool_for_NetCom_BW |
| CIDR Block | 194.140.112.0/21 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS41998 |
| Network Prefix | 194.140.112.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 15:50:48 UTC |
| Last Seen | 2026-07-27 17:19:25 UTC |
| Profile Built | 2026-08-31 01:56:31 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 194.140.115.87
Who owns the IP address 194.140.115.87?
194.140.115.87 is registered to ODR-TKG-MNT. The address falls within the 194.140.112.0/21 network block. Registration is held at RIPE.
Where is 194.140.115.87 located?
Geolocation data places 194.140.115.87 in Ehingen, Baden-Wurttemberg, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 194.140.115.87 malicious or safe?
194.140.115.87 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.