IPDebrief

196.189.126.10

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Threat Intelligence Briefing: IP Address 196.189.126.10/32

Source IP Profile:

The IP address 196.189.126.10/32 has been observed as a source in various network traffic. The address is allocated to the following organization based on WHOIS data:

Observation History:

Relationships and Associations:

Neighborhood Data:

Behavioral Analysis:

Threat Assessment:

Conclusion:

The IP address 196.189.126.10/32 is associated with legitimate business operations as per available data. While there are no immediate threat indicators, continuous monitoring is advised to detect any potential changes in behavior that may suggest unauthorized activities.

Disclaimer:

This briefing is based on available data and does not include speculative analysis beyond observed evidence. Further investigation may be warranted if new data emerges.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐ŸŒ ET
RegionAddis Ababa
CityAddis Ababa
Timezoneโ€”
Latitude8.00
Longitude38.00

๐Ÿข Ownership & Registration

OrganizationNebiyate Belete
ASNAS24757
Network NameORG-ETC2-AFRINIC
CIDR Block196.188.0.0/14
RIRAFRINIC
CountryET
Abuse Contactโ€”

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAAPresent

โ˜๏ธ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierUnknown โ€” Insufficient routing data to classify
No specific classification

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
ServerApache/2.4.52 (Ubuntu)
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.15

๐Ÿ” TLS Certificate

๐Ÿ”’
CN=ambulancedms.moh.gov.et
Issued by CN=YR2, O=Let's Encrypt, C=US
Self-signed: No
SANsambulancedms.moh.gov.et
Valid From2026-06-16T04:08:12+00:00
Valid Until2026-09-14T04:08:11+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period89 days
Serial Number06B16E26412106348827F71C2D87DFE0D484
Thumbprint14DB7CB88073DECCEDAA33F54BE4810887C08930

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
26%
23
routing
21%
12
services
11%
12
ownership
15%
22
reputation
23%
13
geolocation
13%
11
Overall18%813
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-07 23:04:05 UTC
Last Seen2026-06-26 18:11:01 UTC
Profile Built2026-06-26 04:39:32 UTC
Data FreshnessLive
Signal Types20
Total Observations21
๐Ÿ” 20 signal types ยท 21 observations collected
This report is generated from 20+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.