102.205.153.6📋 Copy

# IP Intelligence Briefing: 102.205.153.6/32

Classification: Low Risk | Country: Sierra Leone (SL) | Report Generated: 2026-07-27

---

## Executive Summary

IP address 102.205.153.6 is classified as Low Risk with a risk score of 25. The address is geolocated to Sierra Leone and is currently firewalled with no active services detected. No known threat indicators, malicious campaigns, or persistent attacker behavior have been observed. The IP belongs to AS329109 and operates within the 102.205.153.0/24 subnet.

---

## Risk Assessment

---

## Technical Profile

Network Infrastructure:

• ASN: 329109
• BGP Prefix: 102.205.153.0/24
• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None

DNS Configuration:

• Forward Resolution: Failed
• PTR Records: None
• Hosted Domains: 0
• SPF/DMARC: Not configured
• DNSSEC: Valid

Geolocation:

• Country: Sierra Leone (SL)
• Coordinates: 8.5°N, 11.5°W
• Geo Sources: 1
• Geo Consensus: True

---

## Threat Intelligence

Active Threat Indicators: None

Campaign Associations: None detected

Behavioral Analysis:

• Total Incidents: 0
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Auto-Banned: No
• Persistently Malicious: No

Control Plane:

• Route Stability: Unstable (route changes detected in last 30 days)
• RPKI State: Not evaluated
• IRR Consistency: Not evaluated
• DNSBL Listed: Yes (1 of 8 lists)

---

## Observation History

The IP has generated 8 observations with the following notable signals:

1. Network Classification: Confirmed not CDN, Tor, VPN, proxy, cloud, hosting, or mobile

2. Operator Score: Minimal (0.1304) with 1 of 8 max signals

3. DNSSEC: Valid (confidence 0.90)

4. Blacklist Detection: Listed on multiple lists (confidence 0.85, max severity: high)

Temporal analysis shows 0 ownership changes and 0 threat persistence days.

---

## Neighborhood Analysis (102.205.153.0/24)

Subnet Statistics:

• Total Siblings: 24
• Abuse Density: 0
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 3

Notable Neighbors:

• 102.205.153.3: Risk Score 25, Authority Score 50
• 102.205.153.16: Risk Score 0, Authority Score 50
• 102.205.153.18: Risk Score 25, Authority Score 50

The subnet demonstrates minimal abuse density with most sibling IPs showing no risk scores.

---

## Relationship Graph

No relationships detected for this IP address. The analysis found no links to subnets, hostnames, organizations, or certificates.

---

## Recommended Actions

Immediate Actions: No specific firewall rules or blocking recommendations generated. The IP presents low risk characteristics.

Monitoring Recommendations:

• Continue monitoring for service activation (currently firewalled)
• Track subnet-level activity for correlation with neighbors 102.205.153.3 and 102.205.153.18
• Monitor DNSBL listing status

Decision Guidance: This IP does not warrant immediate blocking. However, maintain logging for baseline activity and review if any behavioral changes occur.

---

## Confidence Metrics

• Overall Confidence: 0.1667 (Low)
• Data Sufficiency: Limited
• Evidence Sources: Minimal

Note: Risk assessment based on current available intelligence. Re-evaluate if new threat indicators emerge or if the IP begins showing active service behavior.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.