196.129.207.148
## THREAT INTELLIGENCE BRIEFING: 196.129.207.148/32
Classification: Mobile Carrier Infrastructure — Low Risk
Date: Current Assessment
Analyst: IPDebrief SOC Intelligence
---
EXECUTIVE SUMMARY
IP 196.129.207.148 is a Vodafone Egypt mobile carrier address with a risk score of 25/100 (Low Risk). The IP operates as infrastructure for Vodafone's Egyptian network (ASN 24835) and is currently firewalled with no open services. The subnet demonstrates clean classification with zero abuse density.
TECHNICAL PROFILE
- Organization: Vodafone Egypt (Vodafone Data, EG)
- ASN: 24835
- Network Block: 196.128.0.0 - 196.143.255.255 (196.129.0.0/16)
- Geolocation: Cairo, Egypt (Africa/Cairo timezone)
- Network Role: Mobile Carrier / Infrastructure
- Service Status: Firewalled / No Services (no open ports, no HTTP/HTTPS)
- Reputation: Low Risk
THREAT ASSESSMENT
- Risk Score: 25/100 (Low Risk)
- Threat Indicators: None detected
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Status: 1 DNSBL listing (8 total lists); subnet classified as clean
- Campaign Association: None identified
NETWORK BEHAVIOR
- DNSSEC: Valid
- Route Stability: Unstable (route changes observed)
- Subnet Classification: Clean
- Abuse Density: 0.0
- Siblings in /24: 1 total, 0 active, 0 threat IPs
OBSERVATION HISTORY
Fifteen observations recorded with most recent activity from 2026-07-23. Historical signals confirm consistent carrier infrastructure behavior:
- DNSSEC validation confirmed
- ASN attribution stable (Vodafone Egypt)
- Geographic location consistent (Egypt)
- Subnet abuse density maintained at zero
RELATIONSHIP ANALYSIS
Relationship graph indicates only same-network associations (196.128.0.0 - 196.143.255.255). No external hostname, certificate, or organizational relationships detected beyond the Vodafone Egypt mobile carrier network.
SOC ACTIONS
1. Monitor: Track for changes in service exposure; current firewalled state is expected for carrier infrastructure
2. Allow: Traffic from this IP should be permitted for legitimate mobile carrier communications
3. No Block Required: Low risk profile with no malicious indicators
4. Context: IP belongs to mobile carrier infrastructure; inbound connections may represent roaming, SMS gateway, or mobile data sessions
RISK INDICATORS SUMMARY
| Indicator | Status |
|---|---|
| Risk Score | 25 (Low) |
| Abuse Density | 0.0 (Clean) |
| Threat Indicators | None |
| Blacklist Count | 1/8 DNSBL |
| Open Services | None |
| Known Malicious | No |
---
CONCLUSION: This IP represents legitimate Vodafone Egypt mobile carrier infrastructure with no evidence of malicious activity. The low risk score, clean subnet classification, and absence of threat indicators support allowing traffic while monitoring for behavioral changes. No immediate action required.
Generated: IPDebrief Intelligence Platform
Data Sources: Multi-signal inference, DNSSEC validation, BGP routing data, threat feeds
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Vodafone Egypt |
| ASN | AS36935 |
| Network Name | 196.128.0.0 - 196.143.255.255 |
| CIDR Block | 196.128.0.0/12 |
| RIR | AFRINIC |
| Country | EG |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS36935 |
| Network Prefix | 196.128.0.0/11 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 1 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 8% | 2 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 05:08:38 UTC |
| Last Seen | 2026-08-24 14:07:12 UTC |
| Profile Built | 2026-08-29 09:44:32 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 196.129.207.148
Who owns the IP address 196.129.207.148?
196.129.207.148 is registered to Vodafone Egypt. The address falls within the 196.128.0.0/12 network block. Registration is held at AFRINIC.
Where is 196.129.207.148 located?
Geolocation data places 196.129.207.148 in Cairo, Cairo Governorate, Egypt. The local time zone is Africa/Cairo. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 196.129.207.148 malicious or safe?
196.129.207.148 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 196.129.207.148 a VPN, proxy, or data center address?
196.129.207.148 is classified as a mobile network based on network ownership and behavioural analysis.