105.234.178.153📋 Copy

# IP Intelligence Briefing: 105.234.178.153

Classification: LOW RISK — No active threats detected

## Executive Summary

IP address 105.234.178.153 was assessed as low-risk with zero risk score across all evaluated dimensions. The IP belongs to ASN 37440 (Atul paliwal) within the 105.234.128.0/17 block under AfriNIC. Geolocation indicates Marseille, France, though DNS resolution points to airtel.mw domain suggesting Malawi telecommunications infrastructure. No active services, open ports, or threat indicators were observed.

## Ownership and Registration

• ASN: 37440
• Organization: Atul paliwal
• Network Block: 105.234.128.0 - 105.234.255.255 (/17)
• RIR: AfriNIC
• Abuse Contact: Not publicly available

## Geolocation Profile

• Country: France (FR)
• City: Marseille
• Region: Nairobi 00100
• Timezone: Europe/Paris
• GPS Accuracy: Insufficient data for precise validation

## Network Services Assessment

• Open Ports: None detected
• TLS Certificates: Not present
• HTTP Services: None operational
• Classification: Firewalled / No Services
• Infrastructure Type: Not CDN, Cloud, VPN, Proxy, or Hosting
• Mobile/Residential: Not classified as mobile carrier or residential IP

## Threat Intelligence Indicators

• Abuse Confidence Score: Not applicable
• Blacklist Status: Zero listings across all threat feeds
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None associated
• DNS Blacklist Count: 0 (out of 8 total lists checked)
• Threat Persistence Days: 0

## DNS and Hostname Resolution

• PTR Record: 153-178-234-105.r.airtel.mw
• Forward Resolution: Confirmed to airtel.mw domain
• Hosted Domain Count: 0
• DNSSEC Validation: Valid
• CAA Records: Present
• SPF Record: Present
• DMARC Record: Not configured

## Control Plane Observations

• Origin ASN: 37440
• BGP Prefix: 105.234.178.0/24
• Route Stability: Flagged as unstable (route changes observed in 30-day period)
• Operator Score: 0.2174 (Minimal)
• DNSSEC Valid: Yes
• HAS CAA Record: Yes
• DNSBL Listed Count: 0

## Historical Signal Analysis

Twelve observation signals were recorded for this IP. Most recent observations (2026-07-30) included:

• DNSSEC validation status
• CAA record verification
• DNS listing checks
• Threat reputation assessments

No escalation in risk signals was observed. All historical measurements remained within minimal risk parameters with no evidence of malicious activity emergence.

## Network Neighborhood Assessment

• Subnet: 105.234.178.0/24
• Abuse Density: 0
• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0

No neighboring IPs in the /24 subnet exhibited threat activity or abuse patterns.

## Relationship Graph

Two relationships were identified:

1. Same Network: 105.234.128.0 - 105.234.255.255

2. DNS Association: 153-178-234-105.r.airtel.mw

No certificate matches, correlated IPs, or additional organizational links were discovered.

## Recommended Security Actions

No immediate firewall or blocking actions recommended. The IP presents minimal threat characteristics with no active malicious indicators. Standard perimeter monitoring is sufficient.

## Analyst Notes

The IP address demonstrates benign network behavior with firewalled service access and no exposure of open ports. The DNS infrastructure (airtel.mw) suggests legitimate telecommunications infrastructure rather than compromised infrastructure. While the ownership record appears incomplete (abuse contact not available), the lack of blacklist presence, zero threat indicators, and minimal operator score support continued monitoring rather than blocking.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.