197.221.109.66📋 Copy

# IP Intelligence Briefing: 197.221.109.66/32

## Executive Summary

IP 197.221.109.66 is assessed as Low Risk with zero threat indicators. The address belongs to G H Dowse (ASN 37334), registered with AFRINIC, located in Johannesburg, Gauteng, South Africa. The IP is currently firewalled with no active services detected, and exhibits no malicious behavior across all monitored threat feeds.

## Profile Overview

• Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Reputation: Low Risk
• Country: South Africa (ZA)
• Region/City: Gauteng, Johannesburg
• ASN: 37334
• Network Block: 197.221.108.0/23

## Threat Assessment

Threat Indicators: None detected

• Blacklist Count: 0
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Threat Feeds: Empty
• Abuse Confidence Score: Not applicable

Services: No open ports detected. The IP is classified as "Firewalled / No Services" with no HTTP, TLS, or server banners observed.

DNS Activity: No PTR hostnames, zero forward resolution records, no hosted domains, and no email authentication records (SPF/DMARC).

## Network Classification

• Infrastructure Type: Not provider, CDN, VPN, proxy, Tor, hosting, mobile, or residential
• Is Bogon: No
• Is Anycast: No
• Cloud: No

Control Plane:

• BGP Prefix: 197.221.109.0/24
• Route Stability: False
• DNSSEC Valid: True
• DNSBL Listed Count: 0
• Operator Score: 0.1304 (Minimal)

## Neighborhood Analysis

Subnet: 197.221.109.66/24

• Abuse Density: 0 (No abuse activity in neighborhood)
• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• Risk Distribution: No high or medium risk neighbors detected

## Observation History

Twelve observations recorded, with recent signals showing:

• Subnet classification: Clean
• Country: ZA (South Africa)
• Organization: G H Dowse
• Network block: 197.221.108.0 - 197.221.109.255
• City: Johannesburg

Temporal analysis indicates:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 0
• Persistently malicious: No

## Relationships

Three relationship records identified, all indicating membership in the same network block (197.221.108.0 - 197.221.109.255). No external entity relationships (organizations, certificates, hostnames) detected.

## Recommended Actions

No security actions required. The IP presents no threat indicators and is classified as low risk. Standard network monitoring is sufficient.

## Intelligence Narrative

The IP 197.221.109.66 represents a benign address within the G H Dowse network infrastructure in South Africa. With zero risk score, no active services, and a clean reputation across all threat feeds, this address does not warrant blocking or special attention. The neighborhood shows no abuse activity, and the IP has no persistent malicious behavior. SOC analysts may treat this as a standard, low-risk residential or business IP with no immediate threat concerns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.