IP INTELLIGENCE BRIEFING: 105.127.7.138/32
Classification: LOW RISK / CLEAN INFRASTRUCTURE
Date of Analysis: 2026-07-23
---
**OVERVIEW**
IP address 105.127.7.138 is classified as Low Risk with a risk score of 0. The address is assigned to Airtel Networks Limited (ASN 36873) under ORG-VNL1-AFRINIC within the 105.112.0.0/12 CIDR block. Geolocation data consistently places the address in Lagos, Nigeria. The IP shows no active threat indicators, no blacklist entries, and no association with known malicious campaigns.
**NETWORK CHARACTERISTICS**
- Network Role: Firewalled / No Services Detected
- DNS Status: No PTR hostnames resolved; no forward DNS resolution
- Service Exposure: Zero open ports detected; no TLS certificates or HTTP responses
- Control Plane: Route stability flag indicates false; operator score rated "Minimal" (0.1304)
- Tor/Proxy Status: Not a Tor exit node; not identified as CDN, VPN, proxy, or hosting infrastructure
**THREAT ASSESSMENT**
- Blacklist Status: Clean (0 blacklist hits)
- Known Attacker: No
- Spam Source: No
- Abuse Confidence Score: Not applicable (clean profile)
- Threat Persistence: 0 days observed; not persistently malicious
**OBSERVATION HISTORY (9 Observations)**
Recent monitoring from 2026-07-23 confirms consistent geolocation data (Lagos, Nigeria) with confidence levels of 0.70–0.95. The subnet classification remained "clean" throughout the observation period. No significant changes detected in ownership, geolocation, or threat signals over time.
**NEIGHBORHOOD ANALYSIS (105.127.7.0/24)**
- Abuse Density: 0.0 (Clean subnet)
- Total Siblings: 4 (1 active, 0 threats)
- Risk Distribution: 1 low-risk neighbor; 0 high/medium risk
- Neighbor IPs: 105.127.7.30, 105.127.7.101, 105.127.7.112 (authority score: 50)
- Inherited Risk: 0.0
**RELATIONSHIP GRAPH**
Single relationship identified: Same Network → ORG-VNL1-AFRINIC. No external associations to hostnames, organizations, or certificates detected.
**RECOMMENDED ACTIONS**
Based on the low-risk profile and absence of malicious indicators, no firewall blocking or mitigation actions are recommended at this time. The IP may be allowed through standard network security policies.
**SUMMARY**
105.127.7.138 is a legitimate infrastructure IP from a major Nigerian telecommunications provider with no observable malicious activity. The subnet demonstrates clean characteristics with minimal abuse density. SOC analysts may treat this address as benign unless new threat indicators emerge.
Status: MONITOR — No immediate action required
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Airtel Networks Limited |
| ASN | AS36873 |
| Network Name | ORG-VNL1-AFRINIC |
| CIDR Block | 105.112.0.0/12 |
| RIR | AFRINIC |
| Country | NG |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS36873 |
| Network Prefix | 105.127.7.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 23% | 2 | 2 |
| routing | 8% | 1 | 1 |
| services | 20% | 2 | 2 |
| ownership | 20% | 2 | 2 |
| reputation | 8% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 15% | 10 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-03 10:48:25 UTC |
| Last Seen | 2026-10-04 02:28:23 UTC |
| Profile Built | 2026-08-29 09:18:24 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 17 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 105.127.7.138
Who owns the IP address 105.127.7.138?
105.127.7.138 is registered to Airtel Networks Limited. The address falls within the 105.112.0.0/12 network block. Registration is held at AFRINIC.
Where is 105.127.7.138 located?
Geolocation data places 105.127.7.138 in Lagos, Lagos, Nigeria. The local time zone is Africa/Lagos. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 105.127.7.138 malicious or safe?
105.127.7.138 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.