197.255.199.96
# Intelligence Briefing: IP 197.255.199.96/32
Classification: LOW RISK / MONITOR
Report Date: 2026-07-26
Analyst: IPDebrief Intelligence Team
---
## Executive Summary
IP 197.255.199.96 is classified as Low Risk (risk score: 25) with minimal threat indicators. The address belongs to a /24 block registered to Simon Abraham via AFRINIC, located in New York, US. The IP shows no active services and is currently firewalled/no services detected.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **ASN** | 37323 |
| **Organization** | Simon Abraham |
| **CIDR Block** | 197.255.199.0/24 |
| **RIR** | AFRINIC |
| **Country** | US (NY) |
| **Reputation** | Low Risk |
| **Threat Indicators** | None |
| **Blacklist Count** | 0 |
| **Control Plane** | Route stable, DNSSEC valid |
---
## Network Context
Subnet Analysis (197.255.199.0/24):
- Abuse Density: 0.1429 (14.29%)
- Classification: Mostly Clean
- Total Siblings: 7
- Active Siblings: 1
- Threat Siblings: 1
Neighbor Risk Distribution:
- High Risk (55): 197.255.199.235, 197.255.199.255
- Medium Risk: 2 IPs
- Low Risk: 4 IPs
Related Hostnames:
- 197-255-199-96.netpagedns.net (PTR record)
---
## Historical Observations
Signal Count: 15 observations tracked
Key Historical Notes:
- Geolocation discrepancies observed: Recent signals show conflicting locations (Gambia vs US) with geo-validation issues due to ICMP blocking
- Control plane operator score: 0.1304 (Minimal)
- Route stability: False (route changes observed)
- DNSBL listings: 1 out of 8 total lists checked
- No persistent malicious activity detected (threat persistence days: 0)
---
## Threat Intelligence Assessment
Threat Indicators: None identified
- No known attacker status
- No Tor exit node activity
- No spam source designation
- No associated threat campaigns
Service Analysis:
- Open ports: None detected
- TLS certificates: None
- HTTP services: None
---
## Recommended Actions
Immediate: No specific firewall rules required based on current risk profile
Monitoring:
- Continue monitoring the /24 subnet for activity from higher-risk neighbors (197.255.199.235, 197.255.199.255)
- Track geolocation consistency
- Monitor for service activation on previously firewalled ports
Context: The target IP presents minimal immediate threat. Primary concern is neighborhood proximity to two medium-to-high risk IPs within the same /24 block. No immediate blocking recommended; maintain monitoring posture.
---
End of Briefing
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Simon Abraham |
| ASN | AS37323 |
| Network Name | 197.255.199.0 - 197.255.199.255 |
| CIDR Block | 197.255.199.0/24 |
| RIR | AFRINIC |
| Country | GM |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | 197-255-199-96.netpagedns.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 197-255-199-96.netpagedns.net |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS37323 |
| Network Prefix | 197.255.199.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 2 |
| services | 12% | 2 | 2 |
| ownership | 31% | 2 | 4 |
| reputation | 33% | 1 | 5 |
| geolocation | 25% | 2 | 3 |
| Overall | 25% | 10 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 08:22:35 UTC |
| Last Seen | 2026-09-04 23:55:49 UTC |
| Profile Built | 2026-09-05 00:04:51 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 35 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 197.255.199.96
Who owns the IP address 197.255.199.96?
197.255.199.96 is registered to Simon Abraham. The address falls within the 197.255.199.0/24 network block. Registration is held at AFRINIC.
Where is 197.255.199.96 located?
Geolocation data places 197.255.199.96 in Boston, US-MA, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 197.255.199.96 malicious or safe?
197.255.199.96 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 197.255.199.96?
The reverse DNS (PTR) record for 197.255.199.96 is 197-255-199-96.netpagedns.net. This hostname is not forward-confirmed, so it should be treated as a weak signal.