105.100.101.47📋 Copy

## IP Intelligence Briefing: 105.100.101.47/32

Classification: Low Risk / Passive Infrastructure

Analysis Date: Current session

Risk Score: 25/100

Executive Summary

IP address 105.100.101.47 is a passive infrastructure address located in Algeria (Algiers) with a low overall risk profile. The IP is firewalled with no active services detected and exhibits no active threat indicators. However, geolocation validation issues and routing instability warrant monitoring. No specific security actions are currently recommended based on the observed threat profile.

Network Classification & Ownership

• Risk Score: 25 (Low Risk)
• Reputation: Low Risk
• Network Role: Firewalled / No Services
• Provider Score: 0
• Authority Score: 0
• Origin ASN: 36947
• BGP Prefix: 105.100.0.0/16
• Route Stability: Unstable (route_changes: 0, isRouteStable: false)
• Operator Score: 0.1304 (Minimal)

Geolocation Data

• Country: Algeria (DZ)
• Region: Algiers
• Coordinates: 36.74°N, 3.12°E
• GeoPlausible: False (validation inconclusive)
• Geo Consensus: True (based on available sources)

Threat Assessment

• Blacklist Count: 0
• Abuse Confidence Score: Not calculated
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Known Campaigns: None
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0

Network Services

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• DNS Forward Resolution: 0 records
• Reverse DNS: None
• Hosted Domains: 0

Neighborhood Analysis

• Subnet: 105.100.101.47/24
• Abuse Density: 0 (clean)
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• High/Medium/Low Risk Neighbors: 0/0/0

Relationship Graph

• Connected Entities: 0
• Related Hostnames: None
• Related Organizations: None
• Related Subnets: None

Historical Observations (12 Signals)

Recent observation history indicates:

• No persistent malicious activity detected
• No ownership changes recorded
• No threat persistence observed
• Most recent signals (2026-07-22) show:

- Provider classification: Not CDN, Tor, VPN, proxy, or hosting

- Subnet classification: Clean with 0 abuse density

- Ownership stability: No changes

- Operator score: Minimal (0.1304)

Control Plane Intelligence

• DNSBL Listings: 1 out of 8 total lists
• DNSSEC Valid: True
• RRP Consistency: Not evaluated
• IRR Consistency: Not evaluated
• MOAS Status: False

Recommended Actions

No specific security actions or firewall rules are recommended at this time. The IP presents a low-risk profile with no active threat indicators.

Intelligence Notes for SOC Analysts

1. Monitor Routing Instability: The BGP prefix 105.100.0.0/16 shows route instability. This may indicate transient routing issues or potential network reorganization.

2. Validate Geolocation: GeoPlausible flag is false, suggesting geolocation data may require verification.

3. DNSBL Context: Single DNSBL listing out of 8 total lists - investigate which specific list flagged this address if monitoring is active.

4. Passive Infrastructure: No services detected suggests this may be a reserved, monitoring, or network infrastructure IP rather than an endpoint.

5. Clean Neighborhood: The /24 subnet shows zero abuse density and no threat siblings, supporting the low-risk assessment.

Conclusion

IP 105.100.101.47 is classified as low risk with no active threat indicators. The address appears to be passive infrastructure with no services running. Continue monitoring for any changes in risk profile or emergence of threat indicators. No immediate blocking or mitigation actions are warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.