197.250.51.252📋 Copy

# IP Intelligence Briefing: 197.250.51.252

Classification: Low Risk / Infrastructure IP

Report Date: Current Analysis Cycle

Analyst Priority: Routine Monitoring

---

## Executive Summary

IP address 197.250.51.252 is identified as a low-risk infrastructure address owned by Vodacom Tanzania Ltd (ASN 36908). The address shows minimal threat indicators with a risk score of 25. Currently classified as "Firewalled / No Services" with no open ports or active services detected.

---

## Network Ownership & Geolocation

• Organization: Vodacom Tanzania Ltd (ORG-VTL1-AFRINIC)
• ASN: 36908
• CIDR Block: 197.250.0.0/16
• Location: Dar es Salaam, Tanzania (TZ)
• Geolocation Consensus: Validated across 1 source

---

## Threat Assessment

Risk Profile:

• Overall Risk Score: 25 (Low Risk)
• Threat Indicators: None detected
• Known Campaigns: None
• Blacklist Status: Listed on 1 of 8 DNSBLs (single listing with high severity)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Network Classification:

• Infrastructure Type: Firewalled / No Services
• Open Ports: None
• TLS Certificates: None
• HTTP Services: None

---

## Neighborhood Analysis

Subnet: 197.250.51.252/24

• Total Siblings: 10
• Active Siblings: 9
• Abuse Density: 0.1 (Low)
• Classification: Mostly Clean

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 1 (197.250.51.59 - Risk Score: 55)
• Low Risk: 8

The subnet shows minimal abuse concentration. The single medium-risk neighbor (197.250.51.59) does not correlate with this address's threat profile.

---

## Temporal Analysis

• Ownership Persistence: Stable (no changes observed)
• Threat Persistence: 0 days
• Observation Count: 12 signals collected
• Campaign Correlation: None detected
• Route Stability: Unstable (route changes observed in 30-day window)

---

## Related Entities

Network Relationships:

• ORG-VTL1-AFRINIC (Same Network)

No additional relationships to organizations, certificates, or hostnames identified.

---

## Recommended Actions

Current Status: No immediate action required.

Monitoring Recommendations:

• Continue routine monitoring due to DNSBL listing
• Monitor neighbor 197.250.51.59 (Risk Score: 55) separately if threat correlation develops
• Review route stability if network traffic patterns change unexpectedly

Firewall Rules: No specific blocking rules recommended at this time. Allow with logging if traffic is observed.

---

## Conclusion

IP 197.250.51.252 represents standard Vodacom Tanzania infrastructure with low-risk characteristics. The single DNSBL listing warrants awareness but does not indicate active malicious behavior. No blocking or filtering action is recommended. Continue standard monitoring practices.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.