196.51.184.171📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 196.51.184.171/32

Report Date: 2026-07-25

Risk Classification: LOW RISK (Score: 25)

---

## EXECUTIVE SUMMARY

IP 196.51.184.171 is a low-risk address associated with Olabisi Adunni under AFRINIC registration. The IP demonstrates no malicious activity indicators, operates in a clean subnet environment, and shows no evidence of abuse, spam, or known campaign participation. Recommended status: monitor without blocking.

---

## OWNERSHIP & REGISTRATION

• Organization: Olabisi Adunni (ORG-ECSC1-AFRINIC)
• ASN: 400463
• RIR: AFRINIC
• CIDR Block: 196.51.0.0/16
• Network Name: ORG-ECSC1-AFRINIC
• Abuse Contact: Not provided

---

## GEOLOCATION ANALYSIS

The IP exhibits geolocation inconsistencies across data sources:

• Primary Consensus: South Africa (ZA) - Africa/Johannesburg timezone
• Secondary Signal: United States (US) - Crugers, New York
• Accuracy Radius: 800km
• Geo Validation: Plausibility assessment returned false

This discrepancy suggests potential routing anomalies or multi-hop traffic patterns. Transit networks include Comcast and Zayo. Traceroute indicates 23 hops with 7 timed-out hops.

---

## THREAT INDICATORS

Malicious Activity Assessment: None detected

• Abuse Confidence Score: Not calculated
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists (likely administrative)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None
• Threat Feeds: Empty

Network Role Classification: Firewalled / No Services

• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None
• Certificate Authority: None

---

## NEIGHBORHOOD ASSESSMENT (196.51.184.0/24)

• Subnet Classification: Clean
• Abuse Density: 0%
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0

Neighbor Profile: 196.51.184.182

• Risk Score: 0
• Authority Score: 50
• Threat Status: Clean

The subnet demonstrates minimal risk with no inherited threat signals.

---

## OBSERVATION HISTORY (13 Observations)

Recent signal analysis reveals:

• Network Classification: Consistently "clean" across all observations
• Abuse Density: 0% sustained
• Threat Observation Count: 0
• Threat Persistence Days: 0
• Persistent Malicious Activity: No

Signal timeline shows stable characteristics with no escalation in risk profile over the observation window.

---

## RELATIONSHIP GRAPH

• Same Network Relationships: 2 entries to ORG-ECSC1-AFRINIC network
• External Relationships: None detected

---

## CONTROL PLANE & ROUTING

• Origin ASN: 400463
• BGP Prefix: 196.51.128.0/17
• RPKI State: Not assessed
• IRR Consistency: Not assessed
• Route Stability: False
• Operator Score: 0.1304 (Minimal)
• DNSSEC: Valid
• CAA Records: None

---

## BEHAVIORAL ANALYTICS

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0

---

## RECOMMENDED ACTIONS

Firewall/Security Actions: None recommended

• Risk score of 25 falls below typical blocking thresholds
• No specific firewall rules or WAF configurations required
• Standard monitoring practices sufficient

Monitoring Recommendations:

1. Monitor for service changes (currently firewalled)

2. Watch for geolocation consistency changes

3. Track DNSBL listing status (currently 1 of 8 lists)

---

## CONCLUSION

IP 196.51.184.171 represents a low-risk infrastructure address with no current threat indicators. The absence of malicious activity, combined with a clean subnet environment and no behavioral anomalies, supports continued monitoring without restrictive firewall interventions. The geolocation inconsistency warrants periodic review but does not constitute immediate threat.

Confidence Level: High (based on 13 historical observations)

Threat Level: Minimal

Recommended Action: Monitor

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.