105.77.196.67📋 Copy

# IP Intelligence Briefing: 105.77.196.67/32

Classification: Low Risk

Date: 2026-07-17

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP 105.77.196.67 presents a low-risk network posture with no active threat indicators. The address belongs to ORG-MC5-AFRINIC under AS36884 with registration to Hassan Elmansouri. No malicious activity, blacklisting, or service exposure was detected during analysis.

---

## Risk Profile

Key Risk Indicators:

• Risk score: 0/100
• No known attacker status
• No spam source designation
• No Tor exit node activity
• Zero blacklist listings across all feeds

---

## Network Infrastructure

Network Role Assessment:

• Not cloud-based, CDN, VPN, proxy, or hosting infrastructure
• Residential/ISP classification: No
• Mobile carrier: No

---

## Geolocation Data

Current Profile:

• Country: GB (United Kingdom)
• City: London
• Region: Casablanca-Settat
• Timezone: Europe/London

Historical Discrepancy:

Geolocation data shows inconsistency between current and historical observations:

• Recent scans (2026-07-17): Some sources report GB/London, others report MA/Casablanca
• This suggests potential geo-routing variations or measurement differences

---

## Threat Intelligence

Threat Indicators:

• Threat feeds: None detected
• Known campaigns: None
• Pulsedive risk: Not assessed
• Blacklist count: 0

Behavioral Analysis:

• Honeypot hits: 0
• Enumeration strikes: 0
• WAF violations: 0
• Total incidents: 0
• Threat persistence: None detected

---

## Service Exposure

Network Services:

• No active services detected on the IP
• Firewall configuration prevents service enumeration
• No reverse DNS resolution

---

## Neighborhood Analysis

Subnet Assessment (105.77.196.67/24):

• Neighbor count: 0
• Abuse density: 0
• High-risk siblings: 0
• Medium-risk siblings: 0
• Low-risk siblings: 0

Conclusion: The immediate /24 subnet shows no abuse activity or related threat actors.

---

## Relationships

Linked Entities (2 total):

• Same Network: ORG-MC5-AFRINIC (2 occurrences)

Observations:

• Limited relationship graph indicates isolated network footprint
• No associated hostnames, certificates, or external IP links detected

---

## Control Plane Data

---

## Historical Observations

Observation Count: 11 signals recorded

Recent Signal Timeline (2026-07-17):

1. Geolocation (Confidence 0.70): Casablanca, MA

2. Blacklist Listings (Confidence 0.50): 8 total lists, 0 current listings

3. DNSSEC Validation (Confidence 0.90): Valid for reverse zone

4. ASN/Prefix (Confidence 0.85): AS36884, 105.77.196.0/22

5. PTR Resolution (Confidence 0.90): Not present

---

## Security Recommendations

Recommended Actions:

• No immediate blocking required
• Monitor for geolocation inconsistencies in future scans
• Standard logging recommended for network traffic
• No firewall rules required at this time

Monitoring Priority: Low

---

## Conclusion

IP 105.77.196.67 is a benign, low-risk address with no active threat indicators. The address belongs to a Moroccan organization (Wana Corporate) with AFRINIC registration. While geolocation data shows some inconsistency between measurement sources, the IP demonstrates no malicious behavior, no service exposure, and no association with known threat actors.

SOC Analyst Guidance: No action required. Standard traffic logging sufficient.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.