102.159.80.226
# IP INTELLIGENCE BRIEFING: 102.159.80.226/32
Classification: LOW RISK / MONITOR
Date: Current Analysis
Analyst: IPDebrief Intelligence
---
## EXECUTIVE SUMMARY
IP address 102.159.80.226 is a Tunisian residential/infrastructure endpoint with minimal threat indicators. The IP belongs to Ahmed Kooli under African Network Information Center (afrinic) registry. Risk assessment scores indicate low-risk profile with no active malicious campaigns or persistent threat behavior observed.
---
## TECHNICAL PROFILE
| Attribute | Value |
|---|---|
| **IP Address** | 102.159.80.226/32 |
| **Risk Score** | 25 (Low Risk) |
| **ASN** | 37705 |
| **Organization** | Ahmed Kooli |
| **Network Block** | 102.159.0.0/17 |
| **Country** | Tunisia (TN) |
| **Region** | Ariana Governorate, Aryanah |
| **Coordinates** | 34.47°N, 9.46°E |
| **RIR** | afrinic |
| **Service Type** | Firewalled / No Services |
---
## THREAT INTELLIGENCE
Active Threat Indicators: None detected
- Blacklist Status: 1/8 DNSBL lists flagged
- Known Campaigns: 0
- Tor Exit Node: False
- Known Attacker: False
- Spam Source: False
- Malicious Campaign Likelihood: Not applicable
- Threat Observation Count: 0
- Persistent Malicious Activity: False
Control Plane Data:
- Route stability: Unstable (routeChanges30d: 0)
- DNSSEC Valid: True
- Operator Score: 0.1304 (Minimal)
- RPKI State: Not assessed
---
## OBSERVATION HISTORY (Last 10 Signals)
Analysis indicates recent observation activity as of 2026-07-25 with the following signals:
- Ownership Data: Consistent registration under Ahmed Kooli with no changes
- Geolocation: Tunisia (TN), Ariana Governorate, Aryanah
- Threat Feeds: Alienvault-OTX flagged with 1 pulse entry
- Operator Assessment: Minimal (0.1304)
- Confidence Levels: 0.17–0.95 across signals
No escalation in threat behavior observed over observation window. Threat persistence days: 0.
---
## NETWORK RELATIONSHIPS
Related Entities:
- Same Network: 102.159.0.0 - 102.159.127.255
- No organizational or hostname associations detected
- No certificate relationships
---
## NEIGHBORHOOD ANALYSIS
Subnet: 102.159.80.226/24
| Metric | Value |
|---|---|
| **Abuse Density** | 0 |
| **Risk Distribution** | High: 0, Medium: 0, Low: 0 |
| **Neighbor Count** | 0 |
| **Threat Siblings** | 0 |
The /24 subnet shows no abuse concentration or related threat activity.
---
## SERVICE PROFILE
- Open Ports: None detected
- TLS Certificate: None
- HTTP Services: None
- Email Reputation: Not assessed
- DNS Records: No PTR hostnames, no forward resolution
---
## RECOMMENDED ACTIONS
Current Risk Level: Low (Score: 25)
Recommended Security Posture:
- No immediate blocking required
- Monitor for service activation or threat indicator emergence
- No specific firewall rules generated based on current risk profile
- Standard network logging recommended
---
## CONCLUSION
IP 102.159.80.226 presents a low-risk profile with no active malicious indicators. The address operates with firewalled services and shows no evidence of being used for command-and-control, scanning, or data exfiltration activities. Historical data indicates stable ownership without threat escalation. Recommend routine monitoring but no immediate remediation actions.
---
Report Generated: IPDebrief Intelligence Platform
Data Sources: Multiple threat feeds, geolocation databases, historical observations
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ahmed Kooli |
| ASN | AS37705 |
| Network Name | 102.159.0.0 - 102.159.127.255 |
| CIDR Block | 102.159.0.0/17 |
| RIR | AFRINIC |
| Country | TN |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS37705 |
| Network Prefix | 102.159.0.0/17 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 07:22:45 UTC |
| Last Seen | 2026-08-27 03:29:11 UTC |
| Profile Built | 2026-08-29 06:14:18 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 16 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.159.80.226
Who owns the IP address 102.159.80.226?
102.159.80.226 is registered to Ahmed Kooli. The address falls within the 102.159.0.0/17 network block. Registration is held at AFRINIC.
Where is 102.159.80.226 located?
Geolocation data places 102.159.80.226 in Aryanah, Ariana Governorate, TN. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.159.80.226 malicious or safe?
102.159.80.226 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.