102.221.29.110
# THREAT INTELLIGENCE BRIEFING
Target IP: 102.221.29.110/32
Classification: Moderate Risk
Date: July 2026
---
## EXECUTIVE SUMMARY
IP address 102.221.29.110 presents a moderate risk profile (55/100) with no active threat indicators. The address is geolocated to Ghana (GH) and operates with no open services. The IP is listed on 3 of 8 DNS blacklists with high severity ratings. No relationships or campaign activity detected.
---
## PROFILE DETAILS
| Attribute | Value |
|---|---|
| **Risk Score** | 55/100 (Moderate) |
| **Geolocation** | Ghana (8.1°N, 1.2°W) |
| **ASN** | 328797 |
| **BGP Prefix** | 102.221.29.0/24 |
| **Network Role** | Firewalled / No Services |
| **DNSBL Listings** | 3/8 lists (High severity) |
| **Tor/Proxy/VPN** | Not detected |
| **Cloud/Hosting** | Not detected |
---
## OBSERVATION HISTORY
Eight signal observations recorded. Most recent activity timestamped 2026-07-27. Key findings:
- Listed on 3 DNS blacklists with maximum severity "high"
- DNSSEC validation: Valid
- No ownership changes detected
- Not classified as persistently malicious
---
## NETWORK CONTEXT
Subnet Analysis (102.221.29.0/24):
- Total Siblings: 2
- Active Siblings: 1 (102.221.29.108, risk score 55)
- Subnet Abuse Density: 0%
- Classification: Low risk neighborhood
Relationship Graph: No associated entities, hostnames, organizations, or certificates detected.
---
## SERVICE ANALYSIS
- Open Ports: None detected
- HTTP/TLS: No services responding
- PTR Records: None
- Reverse DNS: 110.29.221.102.in-addr.arpa (DNSSEC valid)
---
## THREAT INDICATORS
- Known Campaigns: None
- Associated IPs: 0
- Certificate Matches: 0
- Behavioral Flags: Honeypot hits: 0, Enumeration strikes: 0, WAF violations: 0
---
## RECOMMENDED ACTIONS
| Platform | Action |
|---|---|
| **Monitoring** | Increase logging verbosity; review recent activity |
| **iptables** | `iptables -A INPUT -s 102.221.29.110 -j DROP` |
| **nftables** | `nft add rule inet filter input ip saddr 102.221.29.110 drop` |
| **nginx** | `deny 102.221.29.110;` |
| **pfSense** | Block 102.221.29.110/32 |
| **Cloudflare WAF** | Block with expression: `ip.src eq 102.221.29.110` |
| **AWS WAF** | Add 102.221.29.110/32 to IP set |
SOC Priority: MEDIUM – Monitor for activity escalation, consider blocking if business policies permit.
---
*Analysis generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Lovestone Elikplim Mamattah |
| ASN | AS328797 |
| Network Name | ORG-BL26-AFRINIC |
| CIDR Block | 102.221.28.0/22 |
| RIR | AFRINIC |
| Country | GH |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | — |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS328797 |
| Network Prefix | 102.221.29.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 34% | 2 | 6 |
| routing | 8% | 1 | 1 |
| services | 28% | 2 | 3 |
| ownership | 12% | 2 | 2 |
| reputation | 20% | 1 | 3 |
| geolocation | 25% | 2 | 3 |
| Overall | 21% | 10 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 21:57:48 UTC |
| Last Seen | 2026-09-05 16:13:43 UTC |
| Profile Built | 2026-09-05 16:18:42 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.221.29.110
Who owns the IP address 102.221.29.110?
102.221.29.110 is registered to Lovestone Elikplim Mamattah. The address falls within the 102.221.28.0/22 network block. Registration is held at AFRINIC.
Where is 102.221.29.110 located?
Geolocation data places 102.221.29.110 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.221.29.110 malicious or safe?
102.221.29.110 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 102.221.29.110?
Responsive ports observed on 102.221.29.110 include 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.