IPDebrief

105.209.153.158

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP 105.209.153.158 was associated with a low-risk reputation score of 25 and carried no active threat indicators. The address resolved to the mobile network MTN (MCC 655, MNC 10) within South Africa, specifically the Western Cape region. DNS reverse lookup returned 105-209-153-158.access.supersonic.co.za, and the domain was configured with SPF and DMARC authentication records.

Network analysis classified the endpoint as mobile traffic over LTE/5G technology rather than hosting infrastructure, with no open ports or active services detected. Ownership was attributed to ASN 16637 (Dijon Mannie) under ORG-VSA1-AFRINIC. The profile showed zero blacklist entries and no association with known campaigns or attackers. The data indicated standard consumer-grade traffic without evidence of malicious activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇿🇦 South Africa
RegionWestern Cape
CityCape Town
TimezoneAfrica/Johannesburg
Latitude-33.91
Longitude18.41

🏢 Ownership & Registration

OrganizationDijon Mannie
ASNAS16637
Network NameORG-VSA1-AFRINIC
CIDR Block105.208.0.0/12
RIRAFRINIC
CountryZA
Abuse Contact—

🌐 DNS Intelligence

PTR105-209-153-158.access.supersonic.co.za
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnames105-209-153-158.access.supersonic.co.za

🔐 DNS Hygiene

Hygiene Score60% (Good)
SPFPresent
DMARCPresent
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureMobile
Service PurposeFirewalled / No Services
Network TierUnknown — Insufficient routing data to classify
Mobile

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🛡️ Public Network Snapshot

Origin ASNAS16637
Network Prefix105.209.128.0/19
Route mappingFound

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
23
routing
8%
11
services
12%
22
ownership
12%
22
reputation
8%
12
geolocation
17%
23
Overall14%1013
Coverage: 3/6 dimensions · Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-07-11 02:17:18 UTC
Last Seen2026-09-03 19:38:14 UTC
Profile Built2026-09-01 11:10:19 UTC
Data FreshnessLive
Signal Types21
Total Observations27
🔍 21 signal types · 27 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 105.209.153.158

Who owns the IP address 105.209.153.158?

105.209.153.158 is registered to Dijon Mannie. The address falls within the 105.208.0.0/12 network block. Registration is held at AFRINIC.

Where is 105.209.153.158 located?

Geolocation data places 105.209.153.158 in Cape Town, Western Cape, South Africa. The local time zone is Africa/Johannesburg. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 105.209.153.158 malicious or safe?

105.209.153.158 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 105.209.153.158?

The reverse DNS (PTR) record for 105.209.153.158 is 105-209-153-158.access.supersonic.co.za. This hostname is not forward-confirmed, so it should be treated as a weak signal.

Is 105.209.153.158 a VPN, proxy, or data center address?

105.209.153.158 is classified as a mobile network based on network ownership and behavioural analysis.

🏘️ Related IP Addresses

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.