102.204.223.224📋 Copy

## IP Intelligence Briefing: 102.204.223.224/32

Classification: LOW RISK — Passive Infrastructure

Date: 2026-06-25

Analyst: SOC Intelligence Team

---

Executive Summary

IP 102.204.223.224 is a low-risk residential/firewalled endpoint in Port Harcourt, Nigeria, assigned to Serverpulse Africa Ltd (AS139923). The IP shows no active threat indicators, no open services, and no current blacklist listings. Historical observations indicate minimal malicious activity with a single low-severity listing event. No immediate blocking or filtering actions recommended.

---

Network Ownership & Geolocation

• Organization: Serverpulse Africa Ltd (ORG-SAL7-AFRINIC)
• ASN: 139923
• CIDR Block: 102.204.220.0/22
• Location: Port Harcourt, Nigeria (NG)
• Registration: AFRINIC registry

---

Threat Assessment

---

Observed Behavior

• Service Status: Firewalled / No Services
• DNS Resolution: No PTR records, no forward resolution
• Email Auth: No SPF/DMARC records
• TLS/HTTP: No certificates or web services detected
• Control Plane: BGP route unstable; DNSSEC valid

---

Neighborhood Analysis

Subnet: 102.204.223.0/24

• Total Siblings: 8
• Abuse Density: 0.0 (minimal)
• Risk Distribution:

- High Risk: 0

- Medium Risk: 2 (102.204.223.73, 102.204.223.186)

- Low Risk: 6

Notable neighbors show elevated risk scores (25–40) but the target IP remains isolated from malicious activity.

---

Historical Signals

• Total Observations: 15
• Threat Persistence: 0 days
• Ownership Changes: 0
• Notable Event: One high-severity blacklist listing observed on 2026-06-25 (source: Cymru); previously no persistent threats

---

Relationship Graph

IP associates exclusively with ORG-SAL7-AFRINIC network records. No additional hostnames, certificates, or correlated entities identified.

---

Recommended Actions

Current Recommendation: MONITOR — No immediate action required

Justification:

• Risk score at baseline (0)
• No active threat indicators
• No open services or port exposure
• Minimal neighborhood abuse density

Suggested Monitoring:

• Track subnet 102.204.223.0/24 for emerging malicious activity
• Monitor for service emergence on target IP
• Watch for additional blacklist listings

---

Status: Clear for business operations. Continue standard logging and periodic review.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.