IP Intelligence Briefing: 94.57.99.218/32
Subject: Network Intelligence Summary for SOC Analysis
Classification: Low Risk / Legitimate Infrastructure
Date: Current
---
1. IP Ownership and Geolocation
IP address 94.57.99.218 is assigned to ASN 5384 (ETISALAT-MNT), netname GPRS-EMIRNET, operated by Etisalat in the United Arab Emirates. The IP is geolocated to Dubai, AE, with coordinates 23.42°N, 53.85°E. Registration is under RIPE NCC jurisdiction. The subnet block is 94.57.0.0/17.
2. Threat Assessment
The IP demonstrates a risk score of 0 across all dimensions. No threat indicators are present:
- Abuse confidence score: None
- Blacklist count: 0
- Known attacker status: False
- Spam source status: False
- Tor exit node: False
- Campaign association: None
The control plane indicates route stability issues with an operator score of 0.1304 (Minimal), but no DNSBL listings were detected.
3. Network Activity and Services
The IP is classified with service purpose "Firewalled / No Services." No open ports were detected, and no TLS certificates or HTTP responses were observed. The IP does not operate as a CDN, cloud service, VPN, proxy, or hosting provider. Mobile carrier attribution is null.
4. Observational History
Thirteen observations were recorded, with the most recent on 2026-07-29. Signals indicate:
- Geographic consistency: Dubai, UAE
- Ownership stability: No changes observed
- Threat persistence: 0 days
- No persistently malicious activity detected
- Signal confidence ranges from 0.25 to 0.85, with geolocation showing 0.52 confidence
5. Neighborhood Analysis
The /24 subnet (94.57.99.0/24) contains four sibling IPs with an abuse density of 0. Risk distribution shows all four neighbors classified as low risk, with risk scores ranging from 0-25. No high-risk or medium-risk neighbors detected.
Neighbor IPs:
- 94.57.99.4: Risk Score 25
- 94.57.99.69: Risk Score 0
- 94.57.99.140: Risk Score 25
- 94.57.99.225: Risk Score 25
6. Entity Relationships
Three relationship links exist, all pointing to the GPRS-EMIRNET network entity. No additional associations with hostnames, organizations, or certificates were identified.
7. Recommended Actions
No security actions or firewall rules are recommended at this time. The IP exhibits characteristics of legitimate infrastructure with no active threat indicators.
---
SOC Analyst Summary
IP 94.57.99.218 is a low-risk infrastructure address associated with Etisalat's GPRS-EMIRNET network in Dubai, UAE. The IP shows no malicious behavior, no open services, and minimal risk indicators across all dimensions. Neighborhood abuse density is 0, and historical observations confirm stable, non-malicious activity. No immediate blocking or filtering is recommended. Continue standard monitoring protocols.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | ETISALAT-MNT |
| ASN | AS5384 |
| Network Name | GPRS-EMIRNET |
| CIDR Block | 94.57.0.0/17 |
| RIR | RIPE |
| Country | AE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 25% | 6 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-24 02:14:33 UTC |
| Last Seen | 2026-07-29 21:45:48 UTC |
| Profile Built | 2026-07-29 21:56:52 UTC |
| Data Freshness | Live |
| Signal Types | 14 |
| Total Observations | 14 |
Full dossier details are available via our API.