# IP Intelligence Briefing: 105.168.51.118/32
Date: 2026-07-27
Classification: LOW RISK
Status: Under Observation
---
## Executive Summary
IP address 105.168.51.118 is a low-risk endpoint (Risk Score: 15) registered to Nsilu Ferreira within the 105.168.0.0/15 block in Angola. No active threat indicators, open services, or malicious behavior have been detected. The address exhibits stable characteristics with no observed security incidents.
---
## Network Ownership & Registration
- ASN: 37119
- Organization: Nsilu Ferreira
- CIDR Block: 105.168.0.0 - 105.169.255.255
- RIR: AFRINIC
- Abuse Contact: Not provided
- Registration Date: Not available
---
## Geolocation Data
- Country: Angola (AO)
- Region: Luanda Province
- City: Luanda
- Coordinates: -8.84°N, 13.23°E
- Network Distance: 6,843.9 km from observation point
- Geolocation Confidence: High (plausible, validated)
- RTT Metrics: Min 221ms, Avg 224.2ms
---
## Threat Assessment
| Indicator | Status |
|---|---|
| **Risk Score** | 15 (Low) |
| **Provider Score** | 0 |
| **Authority Score** | 0 |
| **Threat Persistence** | 0 days |
| **Known Campaigns** | None |
| **Blacklist Count** | 0 |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Persistently Malicious** | No |
Threat Indicators: None detected.
---
## Network Classification
| Attribute | Value |
|---|---|
| **Service Purpose** | Firewalled / No Services |
| **Open Ports** | None |
| **TLS Certificate** | None |
| **DNS Forward Resolution** | Not confirmed |
| **Hosted Domains** | 0 |
| **Email Authentication** | SPF: No, DMARC: No |
Infrastructure Type: None identified
Cloud/CDN/Proxy/VPN: Negative
Mobile/Residential: Negative
Bogon Address: No
---
## Control Plane Analysis
- BGP Prefix: 105.168.32.0/19
- Origin ASN: 37119
- Route Stability: Unstable (route changes observed)
- RPKI State: Not evaluated
- DNSSEC Valid: Yes
- Operator Score: 0.1304 (Minimal)
---
## Neighborhood Analysis
- Subnet: 105.168.51.118/24
- Abuse Density: 0%
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- Classification: Clean
No neighboring IPs detected within the /24 subnet.
---
## Historical Observations
Total Observations: 13 (as of 2026-07-27)
Key Trends:
- Consistent geolocation data from Luanda, Angola
- No ownership changes detected
- No threat persistence observed
- No malicious activity patterns identified
- Stable network characteristics
Recent Signal Timeline:
- 2026-07-27 03:29:29: RTT measurements (224.2ms avg)
- 2026-07-27 03:27:59: Ownership verification
- 2026-07-27 03:24:53: Network role classification
- 2026-07-27 03:24:23: ASN/registry data
- 2026-07-27 03:23:09: Operator score assessment
---
## Relationship Graph
Connected Entities:
- Network: 105.168.0.0 - 105.169.255.255 (4 entries)
- No external relationships to hostnames, organizations, or certificates
---
## Recommended Security Actions
Current Recommendations: None
Firewall Rules: Not required
Assessment: The IP address presents minimal threat and does not require immediate blocking or filtering. Standard monitoring practices are sufficient.
---
## Intelligence Narrative
IP 105.168.51.118 represents a static endpoint within the Nsilu Ferreira infrastructure in Angola. The address exhibits low-risk characteristics with no evidence of malicious activity, open services, or suspicious behavior patterns. The IP has been consistently observed without changes in ownership or threat posture.
The absence of open ports, DNS resolution, or hosted services suggests this may be a passive or firewalled endpoint. No relationships to known malicious infrastructure or threat campaigns have been identified.
Threat Level: LOW
Recommended Action: Monitor with standard procedures; no immediate blocking required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Nsilu Ferreira |
| ASN | AS37119 |
| Network Name | 105.168.0.0 - 105.169.255.255 |
| CIDR Block | 105.168.0.0/15 |
| RIR | AFRINIC |
| Country | AO |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS37119 |
| Network Prefix | 105.168.32.0/19 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 24% | 7 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 21:05:57 UTC |
| Last Seen | 2026-09-01 00:14:45 UTC |
| Profile Built | 2026-09-01 00:18:52 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 105.168.51.118
Who owns the IP address 105.168.51.118?
105.168.51.118 is registered to Nsilu Ferreira. The address falls within the 105.168.0.0/15 network block. Registration is held at AFRINIC.
Where is 105.168.51.118 located?
Geolocation data places 105.168.51.118 in Luanda, Luanda Province, AO. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 105.168.51.118 malicious or safe?
105.168.51.118 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.