154.238.0.161
# IP INTELLIGENCE BRIEFING: 154.238.0.161/32
Classification: LOW RISK | Status: CLEAN | Date: 2026-07-25
## EXECUTIVE SUMMARY
IP address 154.238.0.161 is classified as LOW RISK with a risk score of 0. The address shows no threat indicators, no blacklist listings, and demonstrates no persistent malicious behavior. The IP belongs to a clean subnet with zero abuse density and no threat-adjacent neighbors. Recommended action: Standard monitoring; no blocking required.
## NETWORK OWNERSHIP
- ASN: 36992
- Organization: Mostafa Mahmoud
- NetName: ORG-NO1-AFRINIC
- RIR: AFNIC
- CIDR Block: 154.236.0.0/14
- Abuse Contact: Not configured
## GEOLOCATION
- Country: Egypt (EG)
- City: Cairo
- Region: Cairo Governorate
- Timezone: Africa/Cairo
- Accuracy Radius: 600 km
- Geo Consensus: Yes (1 source)
## THREAT ASSESSMENT
| Indicator | Status |
|---|---|
| Risk Score | 0 (Low Risk) |
| Abuse Confidence | N/A |
| Blacklist Count | 0 |
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Known Campaigns | None |
| Threat Feeds | None |
Threat Persistence: 0 days observed
Threat Observations: 0
Persistently Malicious: No
## NETWORK ROLE & SERVICES
- Service Purpose: Firewalled / No Services
- Open Ports: None detected
- TLS Certificate: Not detected
- HTTP Banner: Not detected
- Infrastructure Type: Not classified as CDN, VPN, Proxy, Tor, Hosting, or Mobile
## CONTROL PLANE STATUS
- Origin ASN: 36992
- BGP Prefix: 154.238.0.0/20
- Route Stability: False
- Operator Score: 0.1304 (Minimal)
- DNSSEC Valid: Yes
- DNSBL Listed: 0 of 8 total lists
## SUBNET ANALYSIS (154.238.0.161/24)
- Abuse Density: 0 (Clean)
- Classification: Clean
- Inherited Risk: 0
- Total Sibling IPs: 1
- Active Siblings: 0
- Threat Siblings: 0
- High Risk Neighbors: 0
- Medium Risk Neighbors: 0
- Low Risk Neighbors: 0
## DNS ANALYSIS
- PTR Resolution: Not configured
- Forward Resolution: Not confirmed
- Hosted Domains: None (0)
- Email Authentication: Not configured (SPF: N/A, DMARC: N/A)
- TXT Record Count: 0
## OBSERVATION HISTORY (10 Observations)
Latest Observation: 2026-07-25 21:17:43 UTC
- Ownership Changes: 0
- Avg Ownership Days: N/A
- Threat Persistence: 0 days
- Threat Observation Count: 0
All recent observations indicate stable, non-malicious behavior with no changes in ownership or threat posture.
## RELATIONSHIP GRAPH
- Network Associations: ORG-NO1-AFRINIC (Same Network)
- Total Relationships: 2
- Related Certificates: None
## SECURITY ACTIONS RECOMMENDED
No specific firewall rules or blocking actions recommended. The IP demonstrates no active threat indicators.
Recommended SOC Actions:
1. Allow standard network traffic (no blocking required)
2. Monitor for service changes (currently firewalled)
3. No immediate incident response needed
## INTELLIGENCE CONCLUSION
The IP 154.238.0.161/32 represents a low-risk address with clean threat posture. The subnet shows zero abuse density and no threat-adjacent neighbors. The address is associated with a residential or small organization in Cairo, Egypt, with no evidence of malicious activity. The lack of DNS configuration, open services, and email authentication records suggests limited external attack surface. No firewall rules or blocking measures are warranted at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Mostafa Mahmoud |
| ASN | AS36992 |
| Network Name | ORG-NO1-AFRINIC |
| CIDR Block | 154.236.0.0/14 |
| RIR | AFRINIC |
| Country | EG |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS36992 |
| Network Prefix | 154.238.0.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 22% | 6 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-10 01:48:17 UTC |
| Last Seen | 2026-08-27 00:22:53 UTC |
| Profile Built | 2026-08-29 06:51:20 UTC |
| Data Freshness | Live |
| Signal Types | 14 |
| Total Observations | 16 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 154.238.0.161
Who owns the IP address 154.238.0.161?
154.238.0.161 is registered to Mostafa Mahmoud. The address falls within the 154.236.0.0/14 network block. Registration is held at AFRINIC.
Where is 154.238.0.161 located?
Geolocation data places 154.238.0.161 in Cairo, Cairo Governorate, Egypt. The local time zone is Africa/Cairo. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 154.238.0.161 malicious or safe?
154.238.0.161 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.