197.186.75.89📋 Copy

## IP Intelligence Briefing: 197.186.75.89

Classification: LOW RISK

Date: July 2026

Analyst: IPDebrief Intelligence Team

---

Executive Summary

IP address 197.186.75.89 is a low-risk infrastructure endpoint registered to Gerald Festo (ASN 37133) in Dar es Salaam, Tanzania. The IP shows minimal threat indicators, no active malicious campaigns, and operates within a predominantly clean subnet with low abuse density. Recommended action: Monitor with standard baseline alerting.

---

Threat Profile

• Overall Risk Score: 25/100 (Low Risk)
• Abuse Confidence Score: Not calculated
• Threat Indicators: None detected
• Blacklist Count: 0 (0 of 8 DNSBL lists)
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

Network Ownership & Geolocation

• Organization: Gerald Festo
• ASN: 37133
• Network Block: 197.186.0.0 - 197.186.255.255 (/16)
• RIR: AFRINIC
• Country: Tanzania (TZ)
• City/Region: Dar es Salaam Region
• Registration Date: 2009-08-25 (6,175 days)
• Network Stability: Stable with minimal changes

---

Network Role & Services

• Primary Classification: Firewalled / No Services
• Open Ports: None detected
• Service Detection: No active services (HTTP, TLS, DNS)
• DNS PTR: 89-75-186-197.r.airtel.co.tz
• Forward Resolution: Confirmed (1 hostname)
• Email Reputation: Not applicable (no SPF/DMARC)

---

Neighborhood Analysis (197.186.75.0/24)

• Subnet Size: 256 IPs
• Total Siblings: 6 active IPs
• Abuse Density: 16.67% (1 threat sibling)
• Risk Classification: Mostly Clean
• Inherited Risk: 2/100

Notable Neighbor:

• 197.186.75.76: Risk Score 55 (Medium Risk) — Authority Score 50
• All other neighbors: Risk Score 0

---

Routing & BGP Observations

• Origin ASN: 37133
• BGP Path: 37100 → 327708 → 37133 (8 hops)
• Route Stability: Unstable (1 route change in 30 days)
• RPKI State: Not validated
• IRR Consistency: Not available
• DNSSEC: Valid

---

Temporal Risk Assessment

• Ownership Changes: 0
• Threat Persistence: 0 days
• Threat Observation Count: 0
• Persistently Malicious: No
• Historical Observations: 17 total signals

---

Relationship Graph

• Same Network Links: 197.186.0.0/16 (3 relationships)
• DNS Associations: 89-75-186-197.r.airtel.co.tz (4 relationships)

---

Recommended Actions

1. Standard Monitoring: Maintain baseline surveillance with standard threshold alerting

2. Neighbor Awareness: Monitor 197.186.75.76 for elevated activity (risk score 55)

3. No Firewall Rules Required: No immediate blocking or rate-limiting indicated

4. Continued Observation: Track for any changes in threat indicators or network behavior

---

Intelligence Summary

The target IP represents a legitimate Tanzanian network endpoint with no active malicious indicators. The absence of open services suggests the host is either air-gapped, properly secured, or in a non-service role. The single medium-risk neighbor (197.186.75.76) warrants periodic review but does not elevate the target's risk profile. No immediate defensive measures required; maintain standard monitoring protocols.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.