169.224.10.52📋 Copy

# IPDebrief Intelligence Briefing: 169.224.10.52/32

Date: 2026-07-24

Classification: Low Risk / Minimal Threat Indicator

---

## Executive Summary

IP address 169.224.10.52 presents as a low-risk endpoint with minimal observable threat activity. The IP is classified as Low Risk (Score: 25/100) with no active threat indicators detected. Network role assessment indicates the IP is firewalled with no publicly accessible services. Geographic data shows consensus location in Baghdad, Iraq (IQ) within the 169.224.0.0/17 CIDR block. The IP has minimal operator footprint (0.1304 operator score) and limited DNSBL presence.

---

## Risk Assessment

---

## Technical Profile

Network Classification:

• Origin ASN: 199739
• BGP Prefix: 169.224.10.0/24
• Routing Status: Not stable (route changes detected in last 30 days: 0)
• RPKI State: Not verified
• DNSSEC: Valid

Geolocation:

• Country: Iraq (IQ)
• Region: Baghdad
• Coordinates: 33.34°N, 44.4°E
• Geo Source Consensus: True (1 source)

Service Exposure:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Service Purpose: Firewalled / No Services

Email/Domain Infrastructure:

• PTR Hostnames: None
• Forward Resolution: Confirmed: No
• Hosted Domains: 0
• SPF/DMARC: Not configured

---

## Threat Indicators

DNSBL Status:

• Listed Count: 1 out of 8 total lists
• Total DNSBL Lists: 8

---

## Observation History

Total Observations: 10 signals recorded

Key Historical Signals:

1. Ownership/Registrar Data: ARIN registry, organization "ae-earthlink-dmcc-1-mnt", abuse email abuse@earthlink.iq

2. Net Name: AE-EARTHLINK-DMCC-19950607

3. Geolocation Variance: Some observations show conflicting country data (AE/United Arab Emirates vs. IQ/Iraq) with moderate confidence (0.35)

4. Operator Assessment: "Minimal" classification with raw score 0.15

5. Overall Confidence: 0.1667 (low data sufficiency)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: No
• Average Ownership Days: N/A

---

## Network Neighborhood Analysis

Subnet: 169.224.10.0/24

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 5

Notable Neighbors:

• 169.224.10.103 (Risk: 25, Authority: 50)
• 169.224.10.199 (Risk: 25, Authority: 50)
• 169.224.10.202 (Risk: 25, Authority: 50)
• 169.224.10.13, 169.224.10.170 (Risk: 0, Authority: 50)

Overall Subnet Assessment: Minimal abuse density with predominantly low-risk neighbors. No correlated threat activity detected within the /24 subnet.

---

## Relationship Graph

Related Entities: 0

• No connected subnets, hostnames, organizations, or certificates detected
• No correlation data available

---

## Behavioral Analysis

---

## Control Plane Data

---

## Security Recommendations

Firewall/Block Recommendation:

• Status: Monitor / Low Priority
• Risk Justification: Low-risk endpoint (score 25) with no active threat indicators
• Action: No immediate blocking required. Standard network monitoring recommended.

Threat Hunting Indicators:

• Monitor for service opening on previously firewalled IP
• Watch for DNSBL additions (currently listed on 1 of 8 lists)
• Monitor for correlation with other low-risk IPs in same /24 subnet

SOC Analyst Notes:

• IP shows minimal operational footprint
• Geographic data shows some variance (IQ/AE) but consensus points to Iraq
• No evidence of malicious activity or campaign association
• Subnet neighborhood analysis indicates clean environment
• Continue standard monitoring; no elevated threat posture detected

---

Reporting Tool: IPDebrief

Data Confidence: Low (0.1667 overall confidence)

Last Updated: 2026-07-24

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.