# IP INTELLIGENCE BRIEFING: 169.224.11.161/32
## EXECUTIVE SUMMARY
Target IP 169.224.11.161 presents as a low-risk infrastructure address (Risk Score: 25). The IP is assigned to Earthlink Telecommunications Equipment Trading & Services DMCC (ASN 199739) and operates in the 169.224.11.0/24 subnet. No active threat indicators detected; the address is currently firewalled with no open services.
## OWNERSHIP & GEOGRAPHY
- Organization: Earthlink Telecommunications Equipment Trading & Services DMCC
- ASN: 199739 (ae-earthlink-dmcc-1-mnt)
- CIDR Block: 169.224.0.0/17
- Registration Date: 1995-06-07
- Geolocation: Baghdad, Iraq (IQ) per MaxMind GeoLite2
- GeoValidation: Inconsistent (GeoPlausible: false; city reported as Dubai while region is Baghdad)
## NETWORK CHARACTERISTICS
- BGP Prefix: 169.224.11.0/24
- Route Stability: False (route changes detected)
- RPKI State: Not validated
- DNSSEC: Valid
- DNSBL Listings: 1 of 8 total blacklists
- Service Status: Firewalled / No Services
- Open Ports: None
- TLS Certificates: None
- HTTP Banner: None
## THREAT ASSESSMENT
- Overall Risk: Low (Score: 25)
- Threat Indicators: None
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Known Campaigns: None
- Pulsedive Risk: Not available
- Abuse Confidence Score: Not available
The IP shows no evidence of malicious activity. Threat feeds indicate no associations with known attack campaigns or botnet infrastructure.
## NEIGHBORHOOD ANALYSIS
Subnet: 169.224.11.0/24
- Total Siblings: 6
- Active Siblings: 6
- Abuse Density: 0
- High-Risk Neighbors: 0
- Medium-Risk Neighbors: 0
- Low-Risk Neighbors: 6
The subnet demonstrates low abuse density with all neighboring IPs classified as low-risk (Risk Score: 25). No correlation to known malicious infrastructure in the immediate neighborhood.
## OBSERVATION HISTORY
Recent Activity (July 2026):
- 2026-07-26 15:51:08 UTC: Geo-location signal observed (Baghdad, Iraq)
- 2026-07-26 15:49:53 UTC: DNSBL listing detected (8 total lists, 1 active listing with high severity)
- 2026-07-26 15:49:51 UTC: DNSSEC validation confirmed
- 2026-07-26 15:49:51 UTC: ASN and prefix confirmation (169.224.11.0/24)
- 2026-07-26 15:49:50 UTC: No PTR record (forward resolution: false)
Temporal Analysis:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: False
## RELATIONSHIPS
- Network Association: AE-EARTHLINK-DMCC-19950607
- Certificate Matches: 0
- Correlated IPs: 0
## RECOMMENDED ACTIONS
No specific firewall rules or blocking recommendations generated. The IP presents as low-risk infrastructure with no active threat indicators. Standard network monitoring is recommended; no immediate blocking action warranted.
---
Classification: Intelligence Report
Generated: [Current Date]
Data Source: IPDebrief Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ae-earthlink-dmcc-1-mnt |
| ASN | AS199739 |
| Network Name | AE-EARTHLINK-DMCC-19950607 |
| CIDR Block | 169.224.0.0/17 |
| RIR | ARIN |
| Country | IQ |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS199739 |
| Network Prefix | 169.224.11.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 8% | 1 | 1 |
| Overall | 12% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 02:17:56 UTC |
| Last Seen | 2026-10-05 06:37:13 UTC |
| Profile Built | 2026-10-05 06:37:37 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 18 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 169.224.11.161
Who owns the IP address 169.224.11.161?
169.224.11.161 is registered to ae-earthlink-dmcc-1-mnt. The address falls within the 169.224.0.0/17 network block. Registration is held at ARIN.
Where is 169.224.11.161 located?
Geolocation data places 169.224.11.161 in Baghdad, Baghdad, IQ. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 169.224.11.161 malicious or safe?
169.224.11.161 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.