196.0.107.18📋 Copy

IP Intelligence Briefing: 196.0.107.18/32

*Generated via IPDebrief Threat Intelligence Platform*

---

**Core Profile**

• Risk Score: 80/100 (High Risk)
• Ownership: Registered to Kevin Mugaya Francis (ASN 21491, AFRINIC)
• Geolocation: Newark, New Jersey, US (iata code: EWR)
• Network Role: Unknown infrastructure; no cloud, CDN, or residential indicators
• Threat Indicators: No malicious activity, spam, or known attacker associations

---

**Observation History**

• Recent Activity:

- Traceroute via Comcast (21 hops, last hop RTT: 258ms)

- Minimal risk score (0.13) with DNSSEC validation and 4 DNSBL listings

- No persistent threats or ownership changes detected

---

**Network Relationships**

• Subnet: 196.0.107.18/24
• Neighbor Risk: 16 IPs in subnet; 6 high-risk neighbors (80/100), 9 medium-risk (55/100), 1 low-risk (30/100)
• Abuse Density: 37.5% of subnet IPs flagged for risk

---

**Recommended Actions**

1. Block IP: Implement firewall rules to deny traffic from 196.0.107.18.

- iptables: `iptables -A INPUT -s 196.0.107.18 -j DROP`

- Cloudflare/WAF: Block via IP source match

2. Monitor Subnet: Due to high neighbor risk, investigate potential lateral movement or compromised hosts.

3. Verify Ownership: Confirm legitimacy of Kevin Mugaya Francis' registration.

---

Note: While no direct malicious activity is detected, the IP’s high risk score and subnet abuse density warrant closer scrutiny. Use contextual data (e.g., DNSBL listings, traceroute paths) to validate threats.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.