169.224.66.61
# Threat Intelligence Briefing: 169.224.66.61/32
## Executive Summary
IP address 169.224.66.61 presents a Low Risk profile with a risk score of 25. No active threat indicators were detected during analysis. The IP is classified as a firewalled address with no open services.
## Technical Profile
- Risk Score: 25 (Low Risk)
- ASN: 199739
- BGP Prefix: 169.224.66.0/23
- Geolocation: US (New York) — low confidence across multiple sources
- Network Role: Firewalled / No Services
- Open Ports: None detected
- DNSBL Status: Listed on 1 of 8 total lists
## Behavioral Assessment
- Threat Indicators: None
- Known Campaigns: None identified
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
- Total Incidents: 0
- Active Attacker Status: Inactive
## Observations & History
Analysis of 11 signal observations reveals geolocation inconsistencies across data sources (US-NY, UAE, Iraq/Kirkuk reported at different times) with low confidence scores (0.12-0.70). No persistent threat signals or campaign correlations were observed.
## Neighborhood Analysis
The /24 subnet (169.224.66.0/24) contains 6 sibling IPs with an abuse density of 0. Risk distribution shows 2 low-risk neighbors and no medium or high-risk siblings. Notable neighbor: 169.224.66.224 (risk score: 25, authority score: 50).
## Network Relationships
No relationships detected to associated subnets, hostnames, organizations, or certificates.
## Routing Intelligence
- Route Stability: False
- Is Route Stable: No
- Transit Networks: Comcast
- Hop Count: 7
- RPKI/Irr Consistency: Data insufficient
## Recommended Actions
No immediate blocking recommended. The IP demonstrates benign characteristics with no active threat indicators. However, monitoring is advised due to:
- DNSBL listing (1 of 8 lists)
- Route instability
- Geolocation inconsistencies
Suggested Monitoring:
- Add to passive monitoring watchlist
- Review DNSBL listing context if listed on critical reputation lists
- Monitor for any changes in service status or threat indicators
## Conclusion
IP 169.224.66.61 is classified as low risk with no evidence of malicious activity. No blocking or defensive measures required at this time. Continue routine passive monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ae-earthlink-dmcc-1-mnt |
| ASN | AS199739 |
| Network Name | AE-EARTHLINK-DMCC-19950607 |
| CIDR Block | 169.224.0.0/17 |
| RIR | ARIN |
| Country | IQ |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS199739 |
| Network Prefix | 169.224.66.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-07 19:58:24 UTC |
| Last Seen | 2026-10-04 00:09:06 UTC |
| Profile Built | 2026-10-04 00:11:05 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 169.224.66.61
Who owns the IP address 169.224.66.61?
169.224.66.61 is registered to ae-earthlink-dmcc-1-mnt. The address falls within the 169.224.0.0/17 network block. Registration is held at ARIN.
Where is 169.224.66.61 located?
Geolocation data places 169.224.66.61 in Kirkuk, Kirkuk Governorate, United Arab Emirates. The local time zone is Asia/Dubai. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 169.224.66.61 malicious or safe?
169.224.66.61 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.