103.62.153.152📋 Copy

# IP Intelligence Briefing: 103.62.153.152/32

## Executive Summary

IP address 103.62.153.152 registered to ASN 134788 presents a moderate risk profile (risk score 40/100) with geolocation data placing it in Cagayan de Oro, Philippines. The IP is listed on 2 of 8 DNSBLs with high severity ratings and exhibits no active service signatures, indicating it is likely firewalled or inactive.

## Risk Assessment

The IP address scored 40/100 on the risk scale, classified as Moderate Risk. Control plane analysis revealed the route is not stable (isRouteStable: false) with origin ASN 134788 announcing prefix 103.62.153.0/24. The operator score registered at 0.1304, labeled Minimal. No provider, authority, or ownership data was available in the profile.

## Geolocation and Network Classification

Geolocation data consistently identified the IP as located in the Philippines (country code PH), Northern Mindanao region, Cagayan de Oro city. Multiple geolocation sources corroborated this placement with consensus validation enabled. The IP is not classified as cloud infrastructure, CDN, VPN, proxy, Tor exit, hosting, mobile, residential, bogon, or anycast.

## Threat Intelligence

Threat indicators returned no active indicators, known campaigns, or threat feed matches. The IP is not flagged as a Tor exit node, known attacker, or spam source. Behavioral analysis showed no honeypot hits, enumeration strikes, WAF violations, or total incidents. The IP is not persistently malicious (threatPersistenceDays: 0).

## Blacklist Status

DNS blacklist analysis revealed the IP is listed on 2 of 8 total lists. The historical data shows listings across multiple categories with maximum severity rated as "high."

## Service Analysis

No open ports were detected during the scan. No TLS certificates, HTTP titles, server banners, or certificates were identified. The service purpose is classified as "Firewalled / No Services," indicating no active network services on the IP.

## Neighborhood Analysis

The /24 subnet (103.62.153.0/24) contains 2 total siblings: the target IP and one neighbor at 103.62.153.11. The neighbor registered a risk score of 0 and authority score of 60. Subnet abuse density registered at 0. Neighborhood classification indicated low risk with only 1 active sibling.

## Historical Observations

Nine signal observations were recorded over time. Recent observations from 2026-07-27 showed consistent geolocation data from Philippines with varying confidence levels (0.17-0.85). Operator score remained at Minimal (0.1304) across observations.

## Relationship Graph

No relationships were discovered connecting this IP to other entities, subnets, hostnames, organizations, or certificates.

## Recommended Security Actions

Based on the risk profile, the following firewall rules are recommended:

• iptables: `iptables -A INPUT -s 103.62.153.152 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 103.62.153.152 drop`
• nginx: `deny 103.62.153.152;`
• pfSense: `103.62.153.152/32`
• Cloudflare WAF: Block expression `ip.src eq 103.62.153.152`
• AWS WAF: Block addresses `103.62.153.152/32`

## Intelligence Conclusion

The IP 103.62.153.152 presents a moderate risk profile with blacklist listings but no active threat indicators. The lack of open services suggests the IP is either dormant or deliberately firewalled. Recommended action is to block inbound traffic from this IP address pending further investigation or correlation with other security signals.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.