# IP INTELLIGENCE BRIEFING
Target: 169.224.105.247/32
Classification: LOW RISK
Date: Current
Analyst: IPDebrief Intelligence Team
---
## EXECUTIVE SUMMARY
IP 169.224.105.247 is a low-risk address associated with EarthLink DMCC infrastructure in Najaf, Iraq. The IP exhibits minimal threat indicators, no active service exposure, and a stable neighborhood profile. No immediate blocking or filtering actions are recommended.
---
## OWNERSHIP AND GEOGRAPHY
| Field | Value |
|---|---|
| **ASN** | 199739 |
| **Organization** | AE-EarthLink-DMCC-19950607 (Earthlink Telecommunications Equipment Trading & Services DMCC, AE) |
| **Country** | Iraq (IQ) |
| **City** | Najaf |
| **Network** | 169.224.0.0/17 |
| **Registration Date** | 1995-06-07 |
| **RIR** | RIPE |
Geolocation Validation: ICMP probing blocked; geolocation claims validated via distance analysis (3,779.8km from reference point).
---
## THREAT ASSESSMENT
| Metric | Value | Assessment |
|---|---|---|
| **Risk Score** | 25 | Low |
| **Abuse Confidence** | N/A | Not applicable |
| **Blacklist Count** | 0 | Clean |
| **DNSBL Listings** | 1 of 8 | Minimal |
| **Known Campaigns** | None | Not associated |
| **Tor Exit/Proxy** | False | Not a proxy/Tor node |
| **Hosting/CDN** | False | Not hosting infrastructure |
Threat Indicators: None detected. No known attacker signatures, spam source indicators, or threat feed matches.
---
## NETWORK INFRASTRUCTURE
- Service Status: Firewalled / No Services Detected
- Open Ports: None
- DNS Resolution: No PTR records; Forward resolution not confirmed
- DNSSEC: Valid
- SSL/TLS: No certificates detected
- HTTP Services: Not exposed
Behavioral Indicators:
- Honeypot hits: 0
- Enumeration strikes: 0
- WAF violations: 0
- Total incidents: 0
---
## OBSERVATION HISTORY (11 Signals)
Most Recent Activity: 2026-07-26
Key Observations:
- DNSSEC validation confirmed on reverse DNS zone
- ASN 199739 with BGP prefix 169.224.104.0/22 verified
- 8 DNSBL listings total; 1 current listing (high severity)
- Geolocation data consistent across probes
- No ownership changes recorded
Temporal Profile: No persistent malicious activity detected. Threat observation count: 0.
---
## NEIGHBORHOOD ANALYSIS (169.224.105.0/24)
| Metric | Value |
|---|---|
| **Total Neighbors** | 8 |
| **Abuse Density** | 0 |
| **High Risk** | 0 |
| **Medium Risk** | 0 |
| **Low Risk** | 8 |
Neighbor Risk Profile: All adjacent IPs in the /24 subnet maintain low risk scores (25 or 0), indicating a generally benign network environment.
---
## RELATIONSHIP GRAPH
- Connected Entities: 2
- Primary Association: AE-EARTHLINK-DMCC-19950607 network
- Network Correlations: Limited to same-network relationships
---
## RECOMMENDATIONS
Action Required: None
Justification: The IP presents no actionable threat indicators. Risk score of 25 places it well below typical blocking thresholds. No blacklists, no active services, and a clean neighborhood profile support continued normal traffic flow.
Monitoring Priority: Low
---
## TECHNICAL NOTES
- Route Stability: Route changes detected in past 30 days; network under active BGP maintenance
- Operator Score: 0 (minimal operator reputation impact)
- Geolocation Plausibility: Validated via distance calculations
- Email Reputation: Not applicable (no hosted domains or email infrastructure)
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ae-earthlink-dmcc-1-mnt |
| ASN | AS199739 |
| Network Name | AE-EARTHLINK-DMCC-19950607 |
| CIDR Block | 169.224.0.0/17 |
| RIR | ARIN |
| Country | IQ |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS199739 |
| Network Prefix | 169.224.104.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 20% | 2 | 2 |
| ownership | 23% | 2 | 4 |
| reputation | 14% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 18% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 02:17:56 UTC |
| Last Seen | 2026-09-04 16:04:41 UTC |
| Profile Built | 2026-09-04 16:07:06 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 169.224.105.247
Who owns the IP address 169.224.105.247?
169.224.105.247 is registered to ae-earthlink-dmcc-1-mnt. The address falls within the 169.224.0.0/17 network block. Registration is held at ARIN.
Where is 169.224.105.247 located?
Geolocation data places 169.224.105.247 in Najaf, Najaf, IQ. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 169.224.105.247 malicious or safe?
169.224.105.247 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.