## IP Intelligence Briefing: 194.67.120.228/32
Classification: Low Risk | Status: No Active Threat Indicators
1. Ownership & Registration
The IP address is registered to Pavel Arbuzov (ASN 197695) under netname RU-REGRU-940712 within the RIPE NCC registry. Registration data indicates residential hosting infrastructure. DNS records resolve to 194-67-120-228.cloudvps.regruhosting.ru, confirming cloud VPS hosting. Abuse contact is available via RDAP protocols.
2. Geolocation Assessment
Geolocation data places the IP in the Russian Federation (RU) with consensus geo-validation. Probe accuracy radius of 5000km indicates uncertainty in precise city-level location. Network traceroute confirms 30-hop path with stable routing. DNSSEC validation is active.
3. Threat Profile
Current risk score is 0 (Low Risk). No threat indicators detected:
- Blacklist count: 0
- Known attacker flag: False
- Spam source flag: False
- Tor exit node: False
- Abuse confidence score: Not applicable
- No associated campaigns or correlated malicious IPs observed
4. Network Behavior & Services
Network scan reveals no open ports or active services. The IP is classified as "Firewalled / No Services" with TLS certificate and HTTP banner data unavailable. Behavioral analysis shows no persistent malicious activity over the observation period. Operator score of 0.2609 (Basic) indicates standard hosting infrastructure.
5. Neighborhood Analysis
Subnet 194.67.120.0/24 shows clean classification with 0 abuse density. No neighboring IPs flagged as high, medium, or low risk. Inherited risk score is 0, indicating this IP is not part of a coordinated malicious infrastructure.
6. Historical Signals
Fourteen observations recorded through 2026-07-24. Signal history shows consistent ownership and geolocation data without degradation in reputation. No observed escalation in threat signals or behavior changes over time.
7. Operational Intelligence
- DNS: Forward resolution confirmed to regruhosting.ru domain with PTR record matching
- Routing: BGP prefix 194.67.120.0/24 stable with no route changes in 30 days
- Reputation: Domain has SPF record but lacks DMARC policy
- Control Plane: DNSSEC valid, no CAA records present
8. Recommended Actions
No immediate firewall rules or security actions required. Risk profile supports continued monitoring but no blocking recommended based on current intelligence. Standard logging and passive observation sufficient for SOC operations.
Assessment Summary: The IP represents a legitimate cloud VPS infrastructure with no active threat indicators. Standard defensive monitoring recommended. No escalation or investigation required at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Pavel Arbuzov |
| ASN | AS197695 |
| Network Name | RU-REGRU-940712 |
| CIDR Block | 194.67.96.0/19 |
| RIR | RIPE |
| Country | RU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 194-67-120-228.cloudvps.regruhosting.ru |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 194-67-120-228.cloudvps.regruhosting.ru |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS197695 |
| Network Prefix | 194.67.120.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 22% | 6 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-06 06:01:26 UTC |
| Last Seen | 2026-08-27 04:08:13 UTC |
| Profile Built | 2026-08-29 06:04:44 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 194.67.120.228
Who owns the IP address 194.67.120.228?
194.67.120.228 is registered to Pavel Arbuzov. The address falls within the 194.67.96.0/19 network block. Registration is held at RIPE.
Where is 194.67.120.228 located?
Geolocation data places 194.67.120.228 in Russia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 194.67.120.228 malicious or safe?
194.67.120.228 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 194.67.120.228?
The reverse DNS (PTR) record for 194.67.120.228 is 194-67-120-228.cloudvps.regruhosting.ru. This hostname is forward-confirmed, meaning it resolves back to the same address.