196.234.124.230📋 Copy

# Intelligence Briefing: 196.234.124.230/32

## Executive Summary

IP address 196.234.124.230 is classified as low risk with a risk score of 0. The address operates as a web server hosting Fortinet infrastructure services within the United States. No malicious activity, blacklisting, or campaign associations were observed. The IP exhibits stable operational characteristics with minimal security posture requirements.

## Ownership & Network Classification

• Organization: Wassim Feki
• ASN: 37492
• CIDR Block: 196.232.0.0/13
• RIR: afrinic
• Netname: 196.232.0.0 - 196.239.255.255
• Geolocation: New York, US (US-NY)
• Service Purpose: Web Server

## Service Exposure

The IP hosts the following services:

• TCP/443 (HTTPS) - Primary web service
• TCP/22 (SSH) - OpenSSH 8.9p1 Ubuntu-3ubuntu0.16
• TCP/8443 (HTTPS-alt) - Secondary HTTPS service

TLS certificate indicates Fortinet infrastructure:

• Subject: E=support@fortinet.com, CN=FGT60ETK20022282, OU=FortiGate, O=Fortinet, L=Sunnyvale, S=California, C=US
• Issuer: Fortinet Certificate Authority

## Threat Assessment

• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: Clean (0 blacklists)
• Known Attacks: None detected
• Spam Source: No
• Tor Exit Node: No
• Campaign Associations: None

## Control Plane & Routing

• BGP Prefix: 196.234.124.0/22
• Route Stability: Not stable
• DNSSEC: Valid
• DNSBL Listings: 0/8 total lists
• Operator Score: 0.1304 (Minimal)

## Neighborhood Analysis

• Subnet: 196.234.124.230/24
• Abuse Density: 0 (clean classification)
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Inherited Risk: 0

## Historical Observations

Sixteen signal observations recorded. Most recent activity dated 2026-07-30. No evidence of threat persistence or escalating malicious behavior. Ownership changes: 0. Threat observation count: 0.

## Network Relationships

• Two relationships identified to the same network block (196.232.0.0 - 196.239.255.255)
• No external entity associations beyond network boundaries

## Recommended Actions

No security actions or firewall rules recommended at this time. The IP presents minimal operational risk and should be allowed through standard security controls. Monitor for any changes in service exposure or network behavior.

Classification: LOW RISK

Priority: Routine

Last Updated: 2026-07-30

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.