194.246.91.175📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 194.246.91.175/32

Classification: Low Risk / Passive

Date: 2026-07-24

---

## EXECUTIVE SUMMARY

IP 194.246.91.175 presents as a low-risk, passive network endpoint with no active threat indicators. The address is firewalled with no open services and demonstrates minimal abuse activity within its assigned subnet.

---

## PROFILE DATA

Risk Assessment:

• Risk Score: 25/100
• Reputation: Low Risk
• Provider Score: 0
• Authority Score: 0

Network Ownership:

• ASN: 39402
• Organization: Habib Kanso
• Network Name: FERRARI-SUBNET2-ALLOC3
• CIDR Block: 194.246.91.0/24
• RIR: RIPE

Geolocation Analysis:

• Primary Country: US (New York)
• Geographic Consensus: FALSE
• Data Integrity: Mixed signals detected between US and Lebanon (LB) sources

Threat Indicators:

• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

## NETWORK STATE

Service Status: Firewalled / No Services

• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None
• DNS Records: None (no PTR, no forward resolution, no hosted domains)

Control Plane:

• BGP Prefix: 194.246.91.0/24
• Route Stability: False
• DNSSEC Valid: Yes
• Operator Score: 0.1304 (Minimal)
• DNSBL Listings: 1 of 8 lists

---

## NEIGHBORHOOD ANALYSIS

Subnet: 194.246.91.0/24

• Abuse Density: 0
• Total Siblings: 1
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 1

Identified Neighbor: 194.246.91.20 (Risk Score: 0, Authority Score: 50)

---

## RELATIONSHIP GRAPH

Detected Relationships: 2

• Type: Same Network (FERRARI-SUBNET2-ALLOC3)
• No external entity relationships (organizations, hostnames, certificates) detected

---

## OBSERVATION HISTORY

Total Signals Observed: 12

Recent Signals:

• Ownership data confirmed (2026-07-24)
• Network registration stable
• Routing signals present
• No threat persistence indicators
• No ownership changes recorded

Temporal Analysis:

• Threat Persistence Days: 0
• Persistent Malicious: No
• Ownership Changes: 0

---

## NETWORK TRAFFIC

Traceroute:

• Hop Count: 16
• First Hop RTT: 0.5ms
• Last Hop RTT: 144.6ms
• Timed Out Hops: 4
• Transit Networks: Comcast

---

## RECOMMENDED ACTIONS

Current Risk Level: Low

• No immediate blocking required
• Monitor for service activation
• Review geolocation discrepancy between US and Lebanon signals
• Continue passive observation for threat indicator emergence

---

## INTELLIGENCE CONCLUSION

IP 194.246.91.175 is a low-risk, passive endpoint assigned to organization Habib Kanso within the 194.246.91.0/24 subnet. The address shows no active threat indicators, no open services, and minimal neighborhood abuse activity. The geolocation discrepancy between US and Lebanon data warrants periodic monitoring but does not currently indicate malicious activity. Recommended classification: LOW RISK / PASSIVE.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.