38.175.151.252📋 Copy

# IP Intelligence Briefing: 38.175.151.252/32

Classification: Low Risk / Minimal Threat

Risk Score: 25/100

Report Date: 2026-07-22

---

## Executive Summary

IP address 38.175.151.252 presents a low-risk profile with minimal threat indicators. The address is currently firewalled with no active services, no known malicious activity, and no established threat relationships. While listed on a single DNSBL feed, overall abuse density remains negligible.

---

## Technical Profile

Geolocation:

• Country: Canada (CA)
• Region: Alberta
• City: Edmonton
• Geo Confidence: Consensus-based with 2500km accuracy radius

Network Infrastructure:

• Origin ASN: 398721
• BGP Prefix: 38.175.128.0/19
• Route Stability: Unstable (0 route changes in 30-day window)
• RPKI State: Not validated
• DNSSEC: Valid

Service Status:

• Open Ports: None detected
• DNS Resolution: Forward confirmed
• Hosted Domains: 0
• Service Classification: Firewalled / No Services

Control Plane:

• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)
• ISP/Provider: Not identified
• Ownership Data: Not available

---

## Threat Indicators

Threat Classification:

• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• VPN/Proxy: False
• Cloud/CDN/Hosting: False

Campaign Activity:

• Known Campaigns: None
• Certificate Matches: 0
• Correlated IPs: 0

Behavioral Signals:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Persistent Threat Activity: False

---

## Observation History

Timeline: 10 observations recorded (most recent: 2026-07-22)

Key Historical Signals:

• DNSBL Listings: 1 listing detected with high severity classification
• Geolocation Inconsistencies: Mixed geolocation data (CA vs US coordinates 39.83, -98.58) with 0.35 confidence
• Operator Classification: Minimal operator score (0.1304)
• Ownership Changes: 0 recorded

Risk Trend: Stable with no escalation in threat activity

---

## Neighborhood Analysis

Subnet: 38.175.151.252/24

• Neighbor Count: 0
• Abuse Density: 0
• High/Medium/Low Risk Distribution: 0/0/0

The /24 subnet shows no neighboring IPs and zero abuse density, indicating isolated network activity.

---

## Relationship Graph

No relationships detected (subnets, hostnames, organizations, or certificates).

---

## Recommended Actions

Firewall/Routing:

• No specific blocking or allow rules recommended based on current risk profile
• Standard monitoring advised

Monitoring:

• Continue passive monitoring for any service activation
• Monitor for DNSBL additions to existing listing
• Track geolocation consistency

Threat Hunting:

• No active threat hunting required at this time
• No known associations with threat actors

---

## Conclusion

IP 38.175.151.252 is classified as low-risk with minimal threat indicators. The single DNSBL listing requires awareness but does not constitute an active threat. The absence of open services, threat indicators, and neighborhood activity supports a benign classification. Standard monitoring practices are sufficient; no immediate defensive actions required.

---

Analyst Notes: This IP should be treated as low-priority in threat prioritization. While listed on one DNSBL, the overall risk score of 25/100 and absence of active threat indicators suggest legitimate infrastructure with minor reputation concerns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.