169.224.96.212📋 Copy

# IP Intelligence Briefing: 169.224.96.212

## Executive Summary

IP address 169.224.96.212 presents as a low-risk infrastructure asset with minimal threat indicators. The address is associated with an Iraqi network provider (AS199739, AE-EARTHLINK-DMCC) and demonstrates stable classification as "clean" with no active threat campaigns or malicious reputation signals.

## Risk Profile

• Overall Risk Score: 25/100 (Low Risk)
• Reputation: Low Risk
• Blacklist Status: Not blacklisted (0 entries)
• Threat Indicators: None detected
• Known Campaign Affiliation: None

## Technical Classification

• ASN: 199739 (ae-earthlink-dmcc-1-mnt)
• Organization: AE-EARTHLINK-DMCC-19950607
• Geolocation: Najaf, Iraq (32.02°N, 44.34°E)
• Network Role: Firewalled / No Services
• Infrastructure Type: Not cloud, CDN, VPN, proxy, Tor, hosting, or mobile
• Bogon Classification: Not bogon
• Open Services: None detected

## Observed Signals

• DNSBL Status: Listed on 1 of 8 threat feeds (minimal impact)
• Route Stability: Unstable (route changes detected in 30-day window)
• Operator Score: 0.1304 (Minimal)
• RIR Registration: ARIN
• DNSSEC: Valid

## Historical Activity

• Observation Count: 13 signals recorded
• Most Recent Activity: 2026-07-24
• Threat Persistence: 0 days (no persistent malicious activity)
• Signal Types Observed: Geolocation, subnet classification, operator scoring, network role classification

## Neighborhood Assessment

• Subnet: 169.224.96.0/24
• Abuse Density: 0% (clean)
• Total Siblings: 8
• Active Siblings: 4
• Threat Siblings: 0
• Risk Distribution: 5 low-risk, 0 medium-risk, 0 high-risk
• Notable Neighbors: Multiple IPs with risk scores of 0 and 25; no high-risk neighbors detected

## Recommended Actions

Based on current risk profile, no immediate blocking or mitigation actions are required. The IP demonstrates characteristics consistent with legitimate network infrastructure:

• Firewall Policy: Allow or monitor based on organizational policy (no specific block recommendation)
• Monitoring Level: Standard monitoring (low-risk classification)
• Investigation Priority: Low

## Intelligence Context

This IP address is part of a regional network infrastructure deployment in Iraq with no evidence of malicious activity. The subnet maintains a clean abuse density rating, and the target IP shows no behavioral anomalies such as honeypot hits, WAF violations, or enumeration strikes. The single DNSBL listing represents minimal risk exposure and does not indicate active threat actor involvement.

Classification: LOW RISK - Standard monitoring recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.