102.212.183.95📋 Copy

# IP Intelligence Briefing: 102.212.183.95/32

## Executive Summary

IP address 102.212.183.95 presents as a low-risk endpoint with no active threat indicators. The address belongs to ASN 36962 (Mark Townsend) under the Afrinic RIR registry. No open services were detected, and the IP is not associated with known malicious campaigns or threat feeds.

## Risk Assessment

• Overall Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Reputation: Low Risk
• Blacklist Status: Not listed on any major threat feeds

## Network Classification

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: Not present
• DNS Resolution: No forward resolution; no PTR records
• Network Role: No hosting, CDN, proxy, or VPN indicators

## Geolocation Analysis

Conflicting geolocation data was observed across sources:

• Primary Profile: United Kingdom (GB), London
• Historical Observations: Zambia (ZM), Lusaka Province
• Geolocation Consensus: False (multiple sources disagree)
• Geolocation Plausibility: Not validated

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Abuse Confidence Score: Not applicable
• Threat Persistence Days: 0
• Persistent Malicious: No
• Known Campaigns: None identified

## Neighborhood Analysis (102.212.183.0/24)

• Subnet Classification: Mostly clean
• Abuse Density: 33.33%
• Total Sibling IPs: 3
• Threat Siblings: 1
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 1

Notable Sibling: 102.212.183.94 (Risk Score: 25, Authority Score: 50)

## Observation History

15 observations recorded. Key observations include:

• Pulsedive activity detected (2 pulses) with nested threat data
• Geolocation inconsistencies between sources
• Ownership changes: None observed
• Threat observation count: 1

## Control Plane Analysis

• Origin ASN: 36962
• BGP Prefix: 102.212.180.0/22
• Route Changes (30d): 0
• Route Stability: Not stable
• Is MOAS: No
• DNSSEC Valid: Yes
• Operator Score: 0.1304 (Minimal)

## Recommended Actions

No automated security actions recommended based on current risk profile. The IP does not warrant immediate blocking or firewall restrictions.

## Intelligence Notes

1. Monitor 102.212.183.94 – The only sibling with elevated risk score (25) should be monitored for potential coordinated activity.

2. Geolocation Verification – Conflicting country data (GB vs ZM) suggests need for verification before geolocation-based decisioning.

3. Route Stability – The BGP route is not stable, which may impact network routing decisions.

---

*Report generated from IPDebrief intelligence platform data.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.