196.0.107.246📋 Copy

IP Intelligence Briefing: 196.0.107.246

Date: 2026-06-07

---

**1. Core Profile**

• Risk Score: 55/100 (Moderate Risk)
• Ownership: Registered to Kevin Mugaya Francis (AFRINIC ASN 21491).
• Geolocation: Kampala, Central Region, Uganda (0.32°N, 32.57°E).
• Network Role: Unknown infrastructure type; no cloud, CDN, or residential indicators.
• Threat Indicators: No malicious activity detected (no malware, phishing, or exploit campaigns).

---

**2. Observation History**

• Recent Activity (June 7, 2026):

- DNSSEC validation confirmed.

- Geolocation signal consistent with Kampala.

- No new threat indicators or abuse reports.

• Historical Data (May 25–29, 2026):

- No persistent malicious behavior or ownership changes.

- Low confidence in threat signals (0.12–0.30).

---

**3. Relationships & Subnet**

• Network Affiliation: Part of ORG-UTL1-AFRINIC (196.0.0.0/16).
• Subnet Analysis:

- 196.0.107.246/24 subnet has 16 neighbors.

- Abuse Density: 43.8% (7 high-risk, 8 medium-risk, 1 low-risk IPs).

- Notable high-risk neighbors:

- 196.0.107.2 (80/100), 196.0.107.10 (80/100), 196.0.107.18 (80/100).

---

**4. Security Recommendations**

• Monitor: Increase logging verbosity for this IP due to moderate risk.
• Firewall Rules:

- iptables: `iptables -A INPUT -s 196.0.107.246 -j DROP`

- Cloudflare WAF: Block IP with rule:

```json

{

"description": "Block 196.0.107.246 – IPDebrief risk score 55",

"action": "block",

"filter": { "expression": "ip.src eq 196.0.107.246" }

}

```

• Subnet Context: Consider broader mitigation for the 196.0.107.246/24 subnet due to elevated abuse density.

---

Conclusion:

The IP shows no direct malicious activity but resides in a subnet with mixed risk levels. While not currently malicious, its association with high-risk neighbors warrants closer monitoring. Use the provided firewall rules to block traffic from this IP and assess subnet-level protections.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.