199.96.164.114📋 Copy

# IP Intelligence Briefing: 199.96.164.114

## Executive Summary

The IP address 199.96.164.114 presents as a low-risk infrastructure endpoint belonging to MyridWeb LLC (ASN 26548). No active threat indicators or malicious behavior detected. The address is properly classified within the 199.96.164.0/22 BGP prefix and shows stable routing characteristics.

## Threat Profile

Risk Score: 25/100 (Low Risk)

Reputation: Low Risk

Abuse Confidence: None detected

Blacklist Status: 0 blacklist hits

Threat Indicators:

• Not a Tor exit node
• Not a known attacker IP
• Not a spam source
• No known campaign associations
• No threat feed matches

## Network Classification

Organization: MyridWeb LLC

ASN: 26548

Country: United States (US)

Network Role: Firewalled / No Services

Infrastructure Type: Enterprise infrastructure

DNSSEC: Valid

Route Stability: Flagged as unstable (route changes detected)

Control Plane Observations:

• DNSBL listings: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)
• RIR Registry: ARIN
• Route Changes (30d): 0

## Service Analysis

Open Ports: None detected

TLS Certificate: None

HTTP Services: None

DNS Records: No PTR hostnames, no forward resolution confirmed

Email Auth: SPF/DMARC not configured

## Behavioral Indicators

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Auto-Banned: False
• Threat Persistence Days: 0
• Is Persistently Malicious: False

## Neighborhood Assessment

Subnet: 199.96.164.0/24

Abuse Density: 0 (Clean)

Total Siblings: 1

Active Threat Siblings: 0

Neighbor IP: 199.96.164.249 (Risk Score: 0)

## Observation History

Total observations: 19 signals

Most Recent: 2026-06-23

Signal Types Observed:

• Routing signals (minimal risk)
• Geolocation data (US, confidence 0.35)
• Operator scoring (minimal)

Trend Analysis: No evidence of escalating threat behavior. Signals remain minimal across observation windows.

## Related Entities

Network Relationships: 14 relationships identified, all classified as "Same Network" (MYRID-NETWORKS). This indicates the IP is part of a larger MyridWeb infrastructure cluster.

## SOC Recommendations

1. No Immediate Action Required: IP shows no active malicious indicators.

2. Monitor Route Stability: Route changes flagged—verify AS path consistency if this IP appears in security events.

3. Blocklist Verification: Confirm current DNSBL listing status for the single associated blacklist.

4. Neighbor Correlation: 199.96.164.249 shows zero risk; monitor for coordinated activity.

## Conclusion

This IP address represents standard commercial infrastructure with no observable threat activity. The low risk score (25) combined with clean neighborhood metrics and absence of threat indicators supports continued monitoring without immediate blocking or investigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.