# INTELLIGENCE BRIEFING: 196.137.165.33/32
## EXECUTIVE SUMMARY
IP address 196.137.165.33 is classified as LOW RISK (Score: 25/100). The address belongs to Vodafone Egypt's mobile carrier infrastructure and demonstrates clean neighborhood characteristics with zero abuse density. No active threat indicators or malicious behavior observed.
## OWNERSHIP AND INFRASTRUCTURE
- ASN: 36935 (Vodafone Egypt)
- Organization: Vodafone Egypt Telecom. SAE
- CIDR Block: 196.128.0.0/12
- Network Role: Mobile Carrier (LTE technology)
- Mobile Carrier: Vodafone (MCC: 602, MNC: 02)
- RIR: afriNIC
- Service Purpose: Firewalled / No Services
## GEOLOCATION ANALYSIS
The IP exhibits geographic signal variance with primary attribution to Egypt (coordinates: 26.82°N, 30.80°E) and secondary signals from US-NY. Geolocation consensus is inconclusive (geoConsensus: false). RTT analysis and probe data are insufficient for precise validation.
## THREAT ASSESSMENT
- Risk Score: 25 (Low)
- Abuse Confidence Score: Not applicable
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0
- Known Campaigns: None detected
- Persistently Malicious: No (threatPersistenceDays: 0)
## NETWORK SERVICES
- Open Ports: None detected
- TLS Certificate: None
- HTTP Service: None
- DNS Records: No PTR hostnames, no forward resolution
- Email Authentication: No SPF/DMARC records
## CONTROL PLANE STATUS
- Origin ASN: 36935
- BGP Prefix: 196.137.164.0/22
- RPKI State: Not validated
- Route Stability: Unstable (isRouteStable: false)
- DNSSEC Valid: Yes
- DNSBL Listed: 1 of 8 lists
## NEIGHBORHOOD ANALYSIS (196.137.165.0/24)
- Abuse Density: 0 (Clean)
- Risk Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- Inherited Risk: 0
## OBSERVATION HISTORY
Fourteen observations recorded as of 2026-07-24:
- Ownership Changes: 0 (stable ownership)
- Threat Observation Count: 0
- Network Classification: Mobile Carrier (LTE)
- Geolocation Signals: Egypt (EG), confidence 0.52
- Abuse Density: 0 across subnet
## RELATIONSHIP GRAPH
- Direct Relationships: 1 (Same Network: 196.128.0.0 - 196.143.255.255)
- Associated Hostnames: None
- Associated Certificates: None
- Correlated IPs: 0
## SECURITY RECOMMENDATIONS
Based on the IP's risk profile and mobile carrier classification:
1. Allow Traffic: No blocking required. This is legitimate mobile carrier infrastructure.
2. Monitoring: Standard logging recommended for baseline traffic patterns.
3. Firewall Rules: No specific firewall rules necessary.
4. Threat Intelligence: No threat indicators requiring action.
## ASSESSMENT CONCLUSION
IP 196.137.165.33 represents Vodafone Egypt's mobile carrier network with no observed malicious activity. The IP shows clean neighborhood characteristics, stable ownership, and no threat indicators. SOC teams may treat this address as benign infrastructure requiring no special handling beyond standard network logging.
---
*Intelligence prepared by IPDebrief Threat Intelligence System*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Vodafone Egypt |
| ASN | AS36935 |
| Network Name | 196.128.0.0 - 196.143.255.255 |
| CIDR Block | 196.128.0.0/12 |
| RIR | AFRINIC |
| Country | EG |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS36935 |
| Network Prefix | 196.137.164.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-07 12:35:15 UTC |
| Last Seen | 2026-08-27 04:35:42 UTC |
| Profile Built | 2026-08-29 05:57:41 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 196.137.165.33
Who owns the IP address 196.137.165.33?
196.137.165.33 is registered to Vodafone Egypt. The address falls within the 196.128.0.0/12 network block. Registration is held at AFRINIC.
Where is 196.137.165.33 located?
Geolocation data places 196.137.165.33 in Giza, Giza, Egypt. The local time zone is Africa/Cairo. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 196.137.165.33 malicious or safe?
196.137.165.33 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 196.137.165.33 a VPN, proxy, or data center address?
196.137.165.33 is classified as a mobile network based on network ownership and behavioural analysis.