105.164.128.39📋 Copy

# IP Intelligence Briefing: 105.164.128.39/32

Classification: Low Risk / Benign

Date: 2026-07-23

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 105.164.128.39 is classified as Low Risk with a risk score of 25. The address shows no active threat indicators, no open services, and no association with known malicious campaigns. Network analysis indicates this IP is part of a residential or enterprise allocation from an African registry with minimal abuse activity.

---

## Ownership and Network Attribution

Geolocation: Nairobi, Kenya (Nairobi County)

• Coordinates: -1.28°, 36.82°
• Timezone: Africa/Nairobi

---

## Threat Assessment

Risk Score: 25 / 100 (Low Risk)

Threat Indicators:

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Known Campaigns: None

Network Role Classification:

• Provider: No
• Cloud/CDN/VPN/Proxy: No
• Hosting/Residential: No
• Service Status: Firewalled / No Services

---

## Service Exposure Analysis

Open Ports: None detected

TLS Certificate: Not available

HTTP Title: Not available

Server Banner: Not available

The IP address presents no exposed services to external traffic, consistent with a firewalled host or internal network resource.

---

## Control Plane and Routing

---

## Neighborhood Analysis

Subnet: 105.164.128.0/24

Total Neighbors: 12

Abuse Density: 0

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 2 (105.164.128.46, 105.164.128.218)
• Low Risk: 3 (105.164.128.235, 105.164.128.247, 105.164.128.252)

The subnet exhibits minimal abuse activity. The subject IP does not correlate with neighboring hosts showing elevated risk scores.

---

## Historical Observations

Total Observations: 12

Recent signal history indicates:

• Consistent ASN allocation status (6,488 days)
• Stable ownership (no changes observed)
• No persistent malicious behavior detected
• Threat observation count: 0
• Threat persistence days: 0

The IP has maintained a benign profile over the observation period with no escalation in threat signals.

---

## Relationship Graph

No external relationships detected with other organizations, hostnames, or certificates.

---

## Recommended Actions

Security Recommendations: None

Firewall Rules: Not required

Analysis: The IP address presents no actionable threat indicators. Standard network traffic inspection applies. No blocking or rate-limiting measures are recommended based on current intelligence.

---

## Conclusion

IP 105.164.128.39 represents a low-risk network resource with no active malicious indicators. The address is associated with a legitimate African registry allocation, exhibits no service exposure, and shows no correlation with known threat actors or campaigns. No defensive measures are currently indicated.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.