196.202.173.124📋 Copy

# IP Intelligence Briefing: 196.202.173.124/32

Classification: Low Risk | Date: 2026-07-23 | Analyst: IPDebrief Intelligence

## Executive Summary

IP address 196.202.173.124 is classified as low risk with a risk score of 25. The address belongs to ORG-SCL5-AFRINIC (Jack Abonyo) under ASN 15399 and demonstrates no active threat indicators. Network reconnaissance indicates the IP is firewalled with no open services or ports.

## Network Ownership and Geolocation

Ownership:

• ASN: 15399
• Organization: Jack Abonyo (ORG-SCL5-AFRINIC)
• RIR: AFRINIC
• CIDR Block: 196.202.160.0/19

Geolocation:

• Country: GB (United Kingdom) / KE (Kenya)
• City: London / Nairobi
• Region: Nairobi County
• Distance: 6606.3 km
• Note: Geographic validation inconclusive due to ICMP blocking; geolocation consensus unresolved

## Threat Assessment

Threat Indicators:

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable

Control Plane:

• Operator Score: 0.1304 (Minimal)
• DNSBL Listed: 1 of 8 total lists
• Route Stability: Unstable
• RPKI State: Not reported

## Network Services and DNS

Service Status:

• Open Ports: None
• TLS Certificate: Not detected
• HTTP Banner: None
• Service Classification: Firewalled / No Services

DNS Analysis:

• PTR Hostnames: None
• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Authentication (SPF/DMARC): Not configured

## Observation History

Twelve observations recorded with the following signals:

• Ownership signals: 0 changes
• Geolocation signals: Nairobi, Kenya (confidence 0.70)
• Routing/operator score: 0.1304 (Minimal)
• Threat persistence: 0 days
• No persistent malicious activity detected

## Subnet Analysis (196.202.173.0/24)

Neighborhood Risk Profile:

• Total Neighbors: 2
• Abuse Density: 0
• Risk Distribution: 2 Low, 0 Medium, 0 High

Sibling IPs:

• 196.202.173.40: Risk Score 0, Authority Score 50
• 196.202.173.110: Risk Score 25, Authority Score 50

## Network Relationships

Two relationships identified, both indicating same network ownership (ORG-SCL5-AFRINIC). No associated hostnames, organizations, or certificates were discovered.

## SOC Recommendations

Monitoring:

• No immediate blocking required
• Continue standard monitoring protocols
• Monitor for service activation or risk score escalation

Firewall Rules:

• No specific firewall rules recommended
• Default allow policies appropriate for low-risk classification

Priority:

• Low
• No active threat indicators detected

---

*This briefing was generated using IPDebrief intelligence tools. Data accuracy depends on signal availability and verification status.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.