105.174.54.46📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 105.174.54.46/32

Classification: Low Risk / Monitor

Date: 2026-07-30

## Executive Summary

IP address 105.174.54.46 is assessed as low risk (risk score: 25) with minimal threat indicators. The IP is associated with Nsilu Ferreira (ASN 37119) and appears to be firewalled with no active services. Limited DNSBL presence (1 of 8 lists) with high-severity listing warrants monitoring but does not indicate active malicious behavior.

## Ownership and Network Infrastructure

The IP operates within a /16 BGP prefix (105.174.0.0/16) with route instability detected (isRouteStable: false). Origin ASN 37119 shows minimal operator scoring.

## Network Role and Services

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• DNS Activity: No PTR records, no forward resolution
• Email Auth: SPF/DMARC not configured
• Classification: Not cloud, CDN, VPN, proxy, Tor, hosting, mobile, residential, or anycast

## Threat Indicators

Abuse confidence score: Null. No active threat indicators detected in current threat feeds.

## Observation History

Nine signal observations recorded, most recent from 2026-07-30T05:57:35Z. Key observations:

• DNSSEC Validation: False
• Blacklist Listings: 8 total lists queried, 1 listing with high severity
• Scanning Activity: Multiple port scans detected in recent observations
• Overall Confidence: Low (0.08-0.70 across observations)

## Neighborhood Analysis

Subnet: 105.174.54.0/24

Abuse Density: 0 (clean)

Total Siblings: 1

Neighbor IP: 105.174.54.26

• Risk Score: 25
• Authority Score: 50
• Classification: Clean
• DNSSEC Valid: True
• Abuse Density: 0

Both IPs in the /24 share similar risk profiles with no inherited threat signals.

## Security Actions

No specific firewall rules or action recommendations generated. The IP's low-risk profile and firewalled state result in minimal immediate action requirements.

## SOC Analyst Recommendations

1. Monitor: Continue passive monitoring for new threat indicators or service activity.

2. No Immediate Block: Risk score of 25 does not warrant proactive blocking.

3. Watch DNSBL: Investigate the single high-severity DNSBL listing to determine specific list and rationale.

4. Verify Route Stability: Route instability may indicate infrastructure changes or hijacking attempts.

5. Correlate: If 105.174.54.26 or other IPs in 105.174.0.0/15 show malicious activity, reassess 105.174.54.46.

Confidence Level: Moderate

Threat Level: Low

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.