105.118.9.228📋 Copy

# IP Intelligence Briefing: 105.118.9.228/32

Classification: Provider Infrastructure IP

Risk Level: Low Risk

Report Date: 2026-07-25

---

## Executive Summary

IP address 105.118.9.228 is identified as a legitimate provider infrastructure endpoint belonging to Airtel Networks Limited. The IP exhibits no malicious indicators, no active threat signals, and resides in a low-abuse-density subnet. No immediate defensive actions are recommended.

---

## Technical Profile

Ownership:

• ASN: 36873
• Organization: Airtel Networks Limited
• Network Block: 105.112.0.0/12
• RIR: AFIRNIC
• Classification: Provider Network

Geolocation:

• Country: Nigeria (NG)
• Region: Edo State
• City: Benin City
• Coordinates: 6.33°N, 5.62°E
• Timezone: Africa/Lagos

Network Services:

• Open Ports: None detected
• Service Status: Firewalled / No Services
• TLS Certificates: None
• DNS Records: No PTR hostnames, no forward resolution

Control Plane:

• Route Stability: Stable
• Operator Score: 0.1304 (Minimal)
• DNSSEC: Valid
• DNSBL Listed: 0/8 lists
• BGP Prefix: 105.118.0.0/16

---

## Threat Assessment

Current Risk Score: 0

Threat Indicators: None detected

Abuse Confidence: Not applicable

Blacklist Count: 0

Known Campaigns: None

Is Known Attacker: False

Is Spam Source: False

The IP shows no threat persistence, no malicious activity history, and no correlation with known threat campaigns.

---

## Neighborhood Analysis

Subnet: 105.118.9.0/24

Neighbor Count: 1

Abuse Density: 0 (Low)

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 1

Related IP: 105.118.9.166 (Risk Score: 0)

The /24 subnet demonstrates minimal abuse activity with only one neighboring IP. Both IPs in the neighborhood show provider infrastructure characteristics.

---

## Historical Observations

Ten observation signals recorded, most recent from 2026-07-25:

• Geolocation signals consistently report Benin City, Nigeria
• No ownership changes detected
• No threat observation count
• Operator score maintained at minimal level (0.1304)
• No certificate or hostname associations

---

## Relationship Graph

Three relationships identified, all pointing to network-level entity ORG-VNL1-AFRINIC. No external associations with hostnames, organizations, or certificates detected beyond the provider network.

---

## Recommended Actions

Security Recommendations: None

Firewall Rules: Not required

The IP address is classified as provider infrastructure with no actionable threat indicators. Standard provider network filtering policies may apply based on organizational policy, but no specific blocking or rate-limiting rules are warranted.

---

Analyst Notes: This IP represents legitimate telecommunication infrastructure. If this IP appears in alert logs, context should be evaluated to determine if it represents legitimate provider routing or unauthorized access. The subnet shows minimal abuse activity, supporting the conclusion of benign provider operations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.