105.184.242.238📋 Copy

IP Intelligence Briefing: 105.184.242.238

Date: 2026-06-11

---

**1. Risk Profile**

• Risk Score: 65 (Moderate Risk)
• Threat Indicators: No direct malicious activity detected (no known attackers, spam, or campaigns).
• Geolocation:

- Country: South Africa (ZA)

- City: Emfuleni, Gauteng Region

- Coordinates: Latitude -26.63, Longitude 27.78 (inferred from DNS data).

• Network Role: Firewalled / No Services (no open ports or TLS/HTTP services detected).
• Ownership:

- ASN: 37457 (Pieter Bezuidenhout)

- ISP: Telkom SA (afrinic-registed).

---

**2. Observation History**

• Recent Activity (Last 30 Days):

- Geolocation Inference: Confirmed South Africa (ZA) with moderate accuracy (800km radius).

- DNSSEC/Caa Validity: Validated (DNSSEC and CAA records present).

- DNSBL Listings: 3 out of 8 DNSBL lists (low abuse confidence).

- Network Stability: Route stability score indicates inconsistent routing (likely residential or mobile).

---

**3. Relationships**

• Network Associations:

- Linked to 105.184.0.0/16 subnet (same provider, Pieter Bezuidenhout).

• DNS Associations:

- Hostname: `105-184-242-238.south.dsl.telkomsa.net` (Telkom SA).

- No other hostnames or domains associated.

• No Threat Correlations: No linked campaigns, certificates, or malicious entities.

---

**4. Neighborhood Analysis**

• Subnet: 105.184.242.238/24
• Neighbor Count: 0 (no active sibling IPs detected).
• Abuse Density: 0% (subnet appears clean).

---

**5. Recommendations**

• Monitor DNS Activity: Track `telkomsa.net` for suspicious subdomains or email headers.
• Check for Service Changes: Verify if the IP starts opening ports or hosting services.
• Geolocation Verification: Cross-check coordinates with historical data (discrepancies noted).
• DNSBL Monitoring: Watch for additional listings on DNSBL services.

---

Conclusion:

This IP is associated with a residential/mobile network in South Africa. While no direct threats are detected, the moderate risk score and DNSBL listings suggest cautious monitoring. No immediate action is required, but ongoing observation is advised.

Threat Level: Low-Moderate (no active exploitation detected).

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.