105.163.2.116📋 Copy

# INTELLIGENCE BRIEFING: 105.163.2.116/32

Classification: Low Risk

Date: Current

Analyst: IPDebrief Intelligence

---

## EXECUTIVE SUMMARY

IP address 105.163.2.116 was assessed as low-risk with an overall risk score of 15. The address is a mobile device (Safaricom LTE carrier) with no active services detected, no open ports, and no threat indicators. The IP operates within a subnet with minimal abuse density and was not observed as persistently malicious during the observation period.

---

## NETWORK ATTRIBUTES

• IP Address: 105.163.2.116
• ASN: 33771 (Domain Admin)
• Organization: Domain Admin
• CIDR Block: 105.160.0.0/14
• RIR: AFRINIC
• Country: Kenya (KE), Nairobi County
• Mobile Carrier: Safaricom PLC (MCC: 639, MNC: 02)
• Connection Type: Mobile (LTE)
• Network Classification: Firewalled / No Services

---

## THREAT ASSESSMENT

Risk Score: 15 (Low)

Abuse Confidence: Not applicable

Known Attacker: False

Spam Source: False

Tor Exit Node: False

Blacklist Count: 0 threat feeds

The IP address exhibits minimal risk characteristics. No threat indicators were identified, including no known campaigns, no blacklist presence, and no active threat feeds associated with the address. The operator score was rated as "Minimal" (0.1304).

---

## OBSERVATION HISTORY

The IP address was observed across 11 signal observations with the most recent data captured on July 24, 2026. Historical analysis revealed:

• Ownership Changes: 0 (stable ownership)
• Threat Persistence: 0 days
• Threat Observation Count: 0
• Persistent Malicious Activity: Not detected

Geolocation signals consistently resolved to Nairobi, Kenya. The subnet abuse density remained at 0 throughout the observation period, with classification consistently marked as "clean."

---

## NETWORK RELATIONSHIPS

The IP address maintains relationships limited to the assigned network block (105.160.0.0 - 105.163.255.255). No external relationships were identified, including no associated hostnames, organizations, or certificates beyond the parent network assignment.

---

## SUBNET NEIGHBORHOOD ANALYSIS

The /24 subnet (105.163.2.0/24) contains the following characteristics:

• Abuse Density: 0 (clean)
• Total Sibling IPs: 5
• Active Sibling IPs: 2
• Threat Sibling IPs: 0

Neighbor Risk Distribution:

While the target IP (105.163.2.116) remains low-risk, two sibling IPs in the same /24 subnet were assigned elevated risk scores (55). This warrants periodic monitoring of the broader subnet.

---

## SERVICES AND DNS

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• PTR Hostnames: None
• Forward Resolution: Not confirmed
• Email Authentication: SPF and DMARC records absent
• Hosted Domains: 0

---

## CONTROL PLANE DATA

• BGP Prefix: 105.163.2.0/24
• Route Stability: Not stable
• Route Changes (30-day): 0
• DNSSEC Valid: True
• DNSBL Listing: 1 out of 8 total lists
• MOAS: False

---

## RECOMMENDED ACTIONS

Based on the low-risk profile and lack of threat indicators, no immediate blocking or mitigation actions are required for 105.163.2.116. Recommended operational posture:

1. Monitor the subnet 105.163.2.0/24 for the elevated-risk sibling IPs (105.163.2.122, 105.163.2.154)

2. Log traffic from this mobile IP for baseline comparison

3. No firewall rules required at this time; continue standard logging practices

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.