196.39.234.60
# IP Intelligence Briefing: 196.39.234.60/32
## Executive Summary
IP address 196.39.234.60 is a residential FTTH connection in Johannesburg, South Africa with a clean threat profile. The endpoint operates with no active services, no open ports, and zero observed malicious activity. Recommended operational posture: monitor with standard logging; no immediate blocking required.
## Network Ownership & Classification
- ASN: 20011 (Elne Kramer)
- Organization: Elne Kramer
- CIDR Block: 196.39.0.0/16 (196.39.234.60/24)
- RIR Registration: AFRINIC
- Network Role: Residential FTTH / Firewalled
- IP Classification: Clean, non-malicious
## Geolocation Data
- Country: South Africa (ZA)
- Region: Gauteng
- City: Johannesburg
- Coordinates: -26.2309, 28.0583
- Distance from Probes: ~8,994 km
- Round Trip Time: 260–273 ms (average 264.8 ms)
- Geolocation Confidence: Plausible (validated by 5 probes)
## Threat Indicators
- Risk Score: 0 (Low Risk)
- Blacklist Count: 0
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Abuse Confidence Score: Not applicable
- Threat Feeds: None observed
## Services & Network Behavior
- Open Ports: None detected
- TLS Certificate: None
- HTTP Services: None
- DNS Resolution: PTR record 196-39-234-60.ftth.web.africa
- Forward Resolution: Unconfirmed
- Email Authentication: SPF enabled, DMARC not configured
## Neighborhood Analysis (196.39.234.0/24)
- Subnet Classification: Clean
- Abuse Density: 0
- Total Siblings: 2
- Active Siblings: 1
- Threat Siblings: 0
Notable Neighbor:
- IP: 196.39.234.42
- Risk Score: 25 (Low-Medium)
- Authority Score: 50
## Control Plane Observations
- BGP Prefix: 196.39.128.0/17
- Route Stability: Unstable
- DNSSEC: Valid
- DNSBL Listings: 0
- Operator Score: 0.1304 (Minimal)
## Historical Signals
Eighteen observations recorded, most recent from July 25, 2026. Signals include:
- Geolocation validation (South Africa, Johannesburg)
- Network classification (clean subnet)
- Subnet abuse density analysis
- No threat persistence indicators
- No ownership changes detected
## Relationship Graph
Nine relationships identified:
- Three entries mapping to same network block (196.39.0.0/16)
- Six DNS associations pointing to hostname: 196-39-234-60.ftth.web.africa
## Recommended Security Actions
No immediate blocking or firewall rules recommended. Endpoint shows no active threat indicators.
Operational Guidance:
- Monitor standard logs for outbound activity
- No blocking required at this time
- Neighbor IP 196.39.234.42 shows elevated risk; consider monitoring that address separately
---
*Generated by IPDebrief Intelligence Platform | Data as of current observation window*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Elne Kramer |
| ASN | AS20011 |
| Network Name | 196.39.0.0 - 196.39.255.255 |
| CIDR Block | 196.39.0.0/16 |
| RIR | AFRINIC |
| Country | ZA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | 196-39-234-60.ftth.web.africa |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 196-39-234-60.ftth.web.africa |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS20011 |
| Network Prefix | 196.39.128.0/17 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 19:40:31 UTC |
| Last Seen | 2026-08-29 00:50:01 UTC |
| Profile Built | 2026-08-29 01:56:56 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 196.39.234.60
Who owns the IP address 196.39.234.60?
196.39.234.60 is registered to Elne Kramer. The address falls within the 196.39.0.0/16 network block. Registration is held at AFRINIC.
Where is 196.39.234.60 located?
Geolocation data places 196.39.234.60 in Johannesburg, Gauteng, South Africa. The local time zone is Africa/Johannesburg. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 196.39.234.60 malicious or safe?
196.39.234.60 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 196.39.234.60?
The reverse DNS (PTR) record for 196.39.234.60 is 196-39-234-60.ftth.web.africa. This hostname is not forward-confirmed, so it should be treated as a weak signal.