102.254.35.10📋 Copy

# IP Intelligence Briefing: 102.254.35.10/32

## Executive Summary

IP address 102.254.35.10 is classified as Low Risk (Risk Score: 25) with no active malicious indicators. The address belongs to Telkom SA Ltd. (ASN 37457) in Johannesburg, South Africa. The IP exhibits minimal threat activity with no open ports, no known campaigns, and a clean neighborhood profile.

## Risk Profile

• Overall Risk Score: 25 (Low Risk)
• Provider/Authority Scores: 0
• Classification: Firewalled / No Services
• Reputation: Low Risk
• Abuse Confidence Score: Not applicable (no active threats)

## Ownership & Geolocation

• ASN: 37457 (Telkom SA Ltd.)
• Organization: ORG-TSL2-AFRINIC
• CIDR Block: 102.248.0.0/13
• Country: South Africa (ZA)
• Region: Gauteng
• City: Johannesburg
• Registration: AFRINIC RIR

## Network Services & DNS

• Open Ports: None detected
• DNS PTR Hostnames: None
• Forward Resolution: Not confirmed
• Email Authentication: No SPF/DMARC records
• HTTP/HTTPS: No services running
• TLS Certificates: None

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: Empty

## Control Plane & Routing

• BGP Prefix: 102.254.32.0/20
• Route Stability: Not stable
• DNSSEC Valid: Yes
• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)

## Neighborhood Analysis

• Subnet: 102.254.35.10/24
• Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0
• Neighbor IP: 102.254.35.27 (Risk Score: 25, Authority Score: 50)

## Observation History

14 observations collected as of 2026-07-30. The IP showed no persistent malicious behavior with zero threat observation count. Recent activity included port scanning without service enumeration and geo-location inference confirming South African origin (confidence: 0.52). Ownership remains stable with zero changes recorded.

## Relationship Graph

Five relationships identified, all pointing to ORG-TSL2-AFRINIC network infrastructure. No external entity associations detected beyond the immediate network.

## Security Assessment

The IP address 102.254.35.10 represents a low-risk infrastructure endpoint within a legitimate South African ISP network. No actionable threats require immediate response. The single DNSBL listing appears to be an isolated flag with no supporting threat indicators. Recommended action: Monitor for changes in service status or risk profile.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.