196.171.38.222📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 196.171.38.222/32

Classification: CLEAN / LOW RISK

Report Date: 2026-07-22

---

## EXECUTIVE SUMMARY

IP 196.171.38.222 presents a clean security posture with no active threat indicators. The address operates within a /24 subnet (196.171.38.0/24) exhibiting zero abuse density. No malicious campaigns, blacklist entries, or attack patterns detected. Recommended action: No blocking required; standard monitoring applies.

---

## OWNERSHIP & NETWORK ATTRIBUTES

• ASN: 24691 (GNALOU Mazama Esso)
• Network Block: 196.170.0.0/15 (Afrinic RIR)
• Organization: GNALOU Mazama Esso
• CIDR Assignment: 196.170.0.0 - 196.171.255.255
• BGP Prefix: 196.171.32.0/20
• Route Stability: Unstable (route changes detected)

---

## GEOLOCATION DATA

Multiple geolocation sources indicate conflicting data:

• Primary Source: London, GB (Maritime region)
• Secondary Source: Lomé, TG (Togo, Maritime region)
• Consensus: FALSE
• Geolocation Validation: Inconsistent (geoPlausible: false)

*Note: Geographic discrepancies warrant monitoring but do not indicate malicious activity.*

---

## THREAT INDICATORS

• Risk Score: 0.0 (Low Risk)
• Abuse Confidence Score: N/A
• Blacklist Count: 0
• Threat Feeds Matched: None
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Persistent Malicious: No
• Threat Observation Count: 0

---

## NETWORK SERVICES & INFRASTRUCTURE

• Open Ports: None detected
• Active Services: None (Firewalled/No Services)
• TLS Certificates: 0
• DNS Records: 0 forward resolutions
• PTR Hostnames: None
• Infrastructure Type: Not CDN, Not Cloud, Not VPN, Not Proxy

---

## SUBNET ANALYSIS (196.171.38.0/24)

• Subnet Classification: CLEAN
• Abuse Density: 0.0%
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

---

## OBSERVATION HISTORY

Fourteen signal observations recorded. Key findings:

• Ownership Stability: 0 changes detected
• Threat Persistence: 0 days
• Recent Signals: Subnet abuse density, ownership stability, network role classification
• Temporal Pattern: No persistent malicious behavior observed

---

## RELATIONSHIP GRAPH

• Network Relationships: 3 entries (all same network: 196.170.0.0 - 196.171.255.255)
• Associated Hostnames: None
• Associated Certificates: None
• Associated Organizations: None (beyond ASN ownership)

---

## RECOMMENDED ACTIONS

• Firewall Rules: None required
• WAF Rules: None required
• Monitoring Priority: LOW
• Investigation Required: No

---

## ANALYST NOTES

While the IP presents a clean security profile, the following warrant awareness:

1. Route Instability: BGP prefix 196.171.32.0/20 marked as unstable—monitor for routing anomalies.

2. Geolocation Conflicts: Inconsistent geolocation data (GB vs TG) may indicate misconfiguration or multi-region deployment.

3. Subnet Context: Single active sibling in /24 subnet with zero abuse density—neighborhood is benign.

Conclusion: No immediate threat. Standard monitoring recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.