Intelligence Briefing: 196.189.57.157/32
The IP address was classified as Low Risk with a reputation score of 15. Geolocation data located the endpoint in Addis Ababa, Ethiopia. Routing analysis attributed the address to ASN 24757 and the 196.189.57.0/24 prefix block.
Network scans detected no open ports or active services, classifying the host as Firewalled / No Services. Threat intelligence scans found no associations with known campaigns, active attackers, or spam sources. The address was not identified as a Tor exit node, proxy, or hosting provider.
Observation history recorded the IP as active from October 28, 2026, through October 29, 2026. While the threat profile indicated no active malicious activity, the system recommended monitoring due to low-grade risk indicators. No significant neighborhood risk or sibling connections were identified.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Unknown |
| ASN | — |
| Network Name | — |
| CIDR Block | — |
| RIR | — |
| Country | — |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS24757 |
| Network Prefix | 196.189.57.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 2 |
| routing | 20% | 1 | 1 |
| services | 28% | 2 | 2 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 28% | 2 | 2 |
| Overall | 17% | 7 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Low (30%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-28 12:31:45 UTC |
| Last Seen | 2026-10-29 15:55:26 UTC |
| Profile Built | 2026-10-29 16:10:14 UTC |
| Data Freshness | Live |
| Signal Types | 12 |
| Total Observations | 12 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 196.189.57.157
Where is 196.189.57.157 located?
Geolocation data places 196.189.57.157 in Addis Ababa, Addis Ababa, ET. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 196.189.57.157 malicious or safe?
196.189.57.157 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.