143.105.152.196📋 Copy

IP INTELLIGENCE BRIEFING: 143.105.152.196

Subject: Network Intelligence Assessment

Date: July 28, 2026

---

EXECUTIVE SUMMARY

IP address 143.105.152.196 presents a low-risk profile with a risk score of 0. The IP is geolocated to Yaoundé, Cameroon, and is classified as "Firewalled / No Services" with no open ports detected. While the current profile indicates minimal threat activity, historical observations reveal blacklist listings with high severity ratings.

---

GEOGRAPHIC AND NETWORK ATTRIBUTES

The IP resolved to Cameroon (CM) in the Centre region, specifically Yaoundé, with a consensus geo-location score. No ASN or organization registration data is available in the profile. The control plane indicates the route is not stable (isRouteStable: false), though no BGP prefix or origin ASN data was returned.

---

THREAT INDICATORS AND REPUTATION

Current threat indicators show no active reputation sources, zero blacklist counts in the profile, and the IP is not classified as a Tor exit node, known attacker, or spam source. Behavioral analysis recorded zero honeypot hits, no enumeration strikes, zero WAF violations, and no active attacker classification. Email reputation data was unavailable.

---

SERVICE AND NETWORK ROLE

The IP exhibits no open services. DNS analysis confirmed no forward resolution, zero hosted domains, and no reverse DNS records. TLS certificates, HTTP titles, and server banners were not detected. The IP is not categorized as cloud infrastructure, CDN, proxy, VPN, hosting, mobile, residential, bogon, or anycast.

---

HISTORICAL OBSERVATIONS

Ten historical observations were recorded, with the most recent activity on July 28, 2026. Notable historical findings include:

• DNS resolution to starlink.com with CAA records present
• DNSSEC validation confirmed for 196.152.105.143.in-addr.arpa
• Multiple blacklist listings with maximum severity rated as "high"
• Operator scores ranging from 0.2174 to 0.90 across observations

---

RELATIONSHIP ANALYSIS

No relationships were identified in the relationship graph. No links to subnets, hostnames, organizations, or certificates were discovered.

---

NEIGHBORHOOD ANALYSIS

The /24 subnet (143.105.152.0/24) contains 12 sibling IPs with an abuse density of 0. Risk distribution shows 12 low-risk neighbors and zero high or medium-risk neighbors. Authority scores across the subnet range from 50. Several neighboring IPs (including 143.105.152.35, 143.105.152.50, 143.105.152.78, 143.105.152.91, 143.105.152.97, 143.105.152.121, 143.105.152.187, and 143.105.152.241) carried risk scores of 25, while the remaining neighbors showed risk scores of 0.

---

RECOMMENDATIONS

No firewall rules or mitigation actions were recommended by the security actions engine. The IP's current profile supports a "monitor but allow" approach, though historical blacklist activity warrants continued observation. The subnet's overall low abuse density and lack of high-risk neighbors support continued monitoring without aggressive blocking.

---

Data Confidence: Overall confidence score: 0. Data sufficiency: 0. The profile reflects limited data collection but indicates the IP does not exhibit active malicious behavior at the time of analysis.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.