38.3.231.211📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 38.3.231.211/32

Classification: Low Risk Mobile Carrier Infrastructure

Date: 2026-07-25

---

## EXECUTIVE SUMMARY

IP address 38.3.231.211 is classified as low risk (risk score: 25/100). The address belongs to mobile carrier infrastructure operated by Horizon Scope Mobile Telecom Company Ltd (Awal Telecom) under ASN 211908. No active threat indicators were detected. The IP exhibits consistent operational behavior with no evidence of malicious activity.

---

## OWNERSHIP & INFRASTRUCTURE

---

## THREAT ASSESSMENT

Risk Score: 25/100 (Low Risk)

Threat Indicators:

• Blacklist Status: 0 entries (control plane shows 1 DNSBL listing of 8 total lists)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None detected

Network Classification:

• Provider: No
• CDN: No
• VPN: No
• Proxy: No
• Hosting: No
• Cloud: No

---

## NETWORK BEHAVIOR

Services: No active services detected. IP classified as "Firewalled / No Services" with no open ports.

DNS Resolution:

• PTR Hostnames: None
• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Authentication: SPF/DMARC not configured

Geolocation Consensus: Geographic data shows US placement with Baghdad region coordinates, though geographic validation flagged implausible data (geoPlausible: false).

---

## OBSERVATION HISTORY

Total Observations: 14 signals

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 0
• Persistently malicious: No

Signal Consistency: All observed signals consistently classified the IP as mobile carrier infrastructure with no changes in classification over the observation period.

---

## NEIGHBORHOOD ANALYSIS

Subnet: 38.3.231.0/24

Abuse Density: 0 (low)

Total Siblings: 1

Sibling IP: 38.3.231.33

• Risk Score: 25
• Authority Score: 50
• Classification: Low risk

The subnet demonstrates minimal abuse activity with a single sibling IP sharing the same risk profile.

---

## RELATIONSHIP GRAPH

Detected Relationships: 2

• Same Network: HORIZON-CGNT-NET-3 (redundant entries)

No additional relationships detected with hostnames, organizations, or certificates beyond the network block.

---

## CONTROL PLANE DATA

---

## RECOMMENDED ACTIONS

Security Actions: No specific firewall rules or blocking recommendations generated.

Justification: The IP address presents low risk with no active threat indicators. Standard monitoring practices are recommended. No immediate mitigation actions required.

Monitoring Priority: Standard/Low

---

## ANALYST NOTES

This IP address represents legitimate mobile carrier infrastructure with consistent operational behavior. The low risk score, absence of threat indicators, and stable network classification support continued monitoring without intervention. Geographic data inconsistencies should be noted but do not indicate malicious activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.