85.114.199.126
# IPDEBRIEF INTELLIGENCE BRIEFING
Target: 85.114.199.126/32
Classification: Low Risk
Report Date: 2026-07-27
Analyst: Automated Intelligence System
---
## EXECUTIVE SUMMARY
The target IP address 85.114.199.126 is classified as Low Risk with a risk score of 0. The IP belongs to Farlep Invest PrJSC's VEGA-GPON-KYIV network block (85.114.192.0/21) in Kyiv, Ukraine. No active services, threat indicators, or malicious activity have been observed. The IP exhibits no evidence of abuse, spamming, or known campaign participation.
---
## OWNERSHIP AND REGISTRATION
- ASN: 21497 (Farlep Invest PrJSC)
- Organization: Farlep Invest PrJSC
- Network Name: VEGA-GPON-KYIV
- CIDR Block: 85.114.192.0/21
- RIR: RIPE
- Abuse Contact: abuse@vegatele.com (Available via RDAP)
---
## GEOLOCATION
- Country: Ukraine (UA)
- City: Kyiv
- Region: Kyiv City
- Timezone: Europe/Kyiv
- Accuracy Radius: 500km
- Geo Consensus: True
- Geo Sources: 1
---
## THREAT INTELLIGENCE
| Indicator | Status |
|---|---|
| Risk Score | 0 (Low Risk) |
| Abuse Confidence Score | Not Assigned |
| Blacklist Count | 0 |
| Is Tor Exit | False |
| Is Known Attacker | False |
| Is Spam Source | False |
| Known Campaigns | None |
| DNSBL Listed | 0 of 8 |
Threat Feeds: No indicators present in any threat feeds.
---
## NETWORK CLASSIFICATION
| Attribute | Value |
|---|---|
| Is Cloud | False |
| Is CDN | False |
| Is VPN | False |
| Is Proxy | False |
| Is Hosting | False |
| Is Mobile | False |
| Is Residential | False |
| Is Bogon | False |
| Is Anycast | False |
| Service Purpose | Firewalled / No Services |
---
## NETWORK SERVICES
- Open Ports: None detected
- TLS Certificate: Not present
- HTTP Title: Not detected
- Server Banner: None
- Hosted Domains: 0
---
## DNS AND EMAIL AUTHENTICATION
- PTR Hostnames: None
- Forward Resolution: Not confirmed
- Forward Hostnames: None
- SPF Record: Not configured
- DMARC Record: Not configured
- TXT Record Count: 0
---
## CONTROL PLANE DATA
- Origin ASN: 21497
- BGP Prefix: 85.114.1
292.0/21
- AS Path: Not resolved
- RPKI State: Not assigned
- IRR Consistency: Not assigned
- Route Changes (30 days): 0
- Route Stability: False
- MOAS: False
- DNSSEC Valid: True
- HAS CAA: False
- DNSBL Listed Count: 0
- DNSBL Total Lists: 8
- Operator Score: 0
- Delegation Age Days: Not assigned
---
## TEMPORAL ANALYSIS
| Metric | Value |
|---|---|
| Ownership Changes | 0 |
| Average Ownership Days | Not assigned |
| Threat Persistence Days | 0 |
| Threat Observation Count | 0 |
| Persistently Malicious | False |
---
## NEIGHBORHOOD ANALYSIS
- Subnet: 85.114.199.126/24
- Neighbor Count: 0
- Abuse Density: 0
- Inherited Risk: 0
- Total Siblings: 0
- Active Siblings: 0
- Threat Siblings: 0
- Classification: Clean
---
## CAMPAIGN CORRELATION
- Campaign Likelihood: Not assigned
- CERT Matches: 0
- Banner Matches: 0
- Correlated IPs: 0
- CERT Subjects: None
---
## GEOVALIDATION
- Geo Plausible: False
- Distance (km): Not assigned
- Minimum RTT (ms): Not assigned
- Average RTT (ms): Not assigned
- Probe Count: 0
- Violation: None
- Minimum Possible RTT (ms): Not assigned
---
## FINGERPRINTING
| Attribute | Value |
|---|---|
| Server Fingerprint | Not assigned |
| Status Code | Not assigned |
| HSTS Enabled | False |
| CSP Enabled | False |
| HTTP/2 Enabled | False |
| Favicon Hash | Not assigned |
| Body Hash | Not assigned |
| Powered By | Not assigned |
| Generator | Not assigned |
| TTBF (ms) | Not assigned |
| HTTP Version | Not assigned |
| Referrer Policy | Not assigned |
| Permissions Policy | Not assigned |
| Header Order | Not assigned |
---
## EMAIL REPUTATION
- Reputation: Not assigned
- Has Score: False
- Sender Score: Not assigned
---
## TRACEROUTE ANALYSIS
- Hop Count: 30
- First Hop RTT (ms): 0.2
- Last Hop RTT (ms): 221.5
- Timed Out Hops: 18
- Transit Networks: Comcast, GTT
---
## BEHAVIORAL ANALYSIS
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
- Total Incidents: 0
- Categories: None
- Auto Banned: Not assigned
---
## OBSERVATION HISTORY
Recent Observations (7):
1. 2026-07-27T00:10:47 UTC - Subnet analysis: Clean classification, abuse density 0, inherited risk 0 (confidence: 0.40)
2. 2026-07-27T00:09:10 UTC - Ownership persistence check: No ownership changes, no persistent malicious activity (confidence: 0.85)
3. 2026-07-27T00:06:57 UTC - Geolocation inference: UA country, coordinates 48.38, 31.17 (confidence: 0.52)
4. 2026-07-27T00:05:25 UTC - RIR/organization resolution: Farlep Invest PrJSC, VEGA-GPON-KYIV, abuse@vegatele.com (confidence: 0.90-0.95)
Total Observations: 14
---
## ACTIONS AND RECOMMENDATIONS
- Risk Score: 0
- Provider: Not assigned
- Firewall Rules: None generated
- Recommendations: No action required based on current risk assessment
---
## ANALYST NOTES
The IP address 85.114.199.126/32 presents no immediate threat to monitored networks. The address belongs to a legitimate ISP network in Ukraine with no associated abuse indicators. No open services were detected, and the IP does not appear on any threat feeds or blacklists. Monitor for changes in network behavior, but no immediate blocking or alerting is warranted based on available intelligence.
---
END OF INTELLIGENCE BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Farlep Invest PrJSC |
| ASN | AS21497 |
| Network Name | VEGA-GPON-KYIV |
| CIDR Block | 85.114.192.0/21 |
| RIR | RIPE |
| Country | UA |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS21497 |
| Network Prefix | 85.114.192.0/21 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 13% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 02:47:52 UTC |
| Last Seen | 2026-08-31 16:01:59 UTC |
| Profile Built | 2026-08-31 16:45:11 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 85.114.199.126
Who owns the IP address 85.114.199.126?
85.114.199.126 is registered to Farlep Invest PrJSC. The address falls within the 85.114.192.0/21 network block. Registration is held at RIPE.
Where is 85.114.199.126 located?
Geolocation data places 85.114.199.126 in Kyiv, Kyiv City, Ukraine. The local time zone is Europe/Kyiv. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 85.114.199.126 malicious or safe?
85.114.199.126 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.