105.245.101.24📋 Copy

# IP Intelligence Briefing: 105.245.101.24/32

## Executive Summary

IP address 105.245.101.24 is classified as Low Risk (Risk Score: 25) and operates as a Vodacom corporate infrastructure endpoint in Pretoria, South Africa. The IP is currently firewalled with no active services, no open ports, and no threat indicators. While the immediate IP shows no malicious activity, neighborhood analysis reveals one sibling IP with elevated risk characteristics.

## Ownership and Network Details

• ASN: 29975
• Organization: Jacques Hendricks
• CIDR Block: 105.245.96.0 - 105.245.127.255 (/19)
• Netname: 105.245.96.0 - 105.245.127.255
• RIR: AFRINIC
• Geolocation: Pretoria, Gauteng, South Africa (ZA)
• Timezone: Africa/Johannesburg

## DNS and Network Role

• PTR Record: vc-gp-n-105-245-101-24.umts.vodacom.co.za
• Forward Resolution: vc-gp-n-105-245-101-24.umts.vodacom.co.za
• Network Role: Firewalled / No Services
• DNS Classification: Reverse DNS confirmed with Vodacom domain

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not available
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Cloud/CDN/Proxy: No
• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None

## Control Plane and Routing

• Origin ASN: 29975
• BGP Prefix: 105.245.64.0/18
• Route Stability: False (route changes observed)
• DNSBL Listed: 1 of 8 total lists
• RPKI State: Not available
• IRRC Consistency: Not available

## Neighborhood Analysis (105.245.101.0/24)

• Subnet Classification: Clean
• Abuse Density: 0%
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor IP: 105.245.101.80 (Risk Score: 40, Authority Score: 60)

*Note: One neighboring IP (105.245.101.80) shows elevated risk score of 40 and should be monitored.*

## Observation History (17 Total Observations)

Recent signal observations indicate:

• Subnet Classification: Consistently clean (abuse density: 0)
• Ownership Changes: None detected
• Threat Persistence: Not observed
• Geolocation Validation: ICMP blocked, unable to validate; inferred coordinates show distance of 8944.4 km from probe origin
• Geo Consensus: Country code ZA confirmed via multi-signal inference

## Related Entities

• DNS Hostname: vc-gp-n-105-245-101-24.umts.vodacom.co.za
• Associated Network: 105.245.96.0 - 105.245.127.255

## Recommended Actions

No immediate blocking actions required. The IP shows no malicious indicators and is classified as a legitimate Vodacom infrastructure endpoint. However, the following monitoring recommendations apply:

1. Monitor Neighbor IP: 105.245.101.80 (Risk Score: 40) shows elevated risk and warrants attention

2. Route Monitoring: Route stability flag indicates potential BGP changes; monitor for anomalies

3. DNSBL Watch: IP is listed on 1 of 8 DNSBL lists; verify list context if traffic is observed

4. Geo Validation: ICMP validation blocked; consider alternative validation methods if needed for correlation

## Conclusion

IP 105.245.101.24 represents standard corporate infrastructure from Vodacom South Africa with no active threat indicators. The low risk score, clean subnet classification, and legitimate reverse DNS records support a non-actionable classification. SOC analysts should monitor the neighboring IP 105.245.101.80 for potential threat activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.