154.144.224.39📋 Copy

IP Intelligence Briefing: 154.144.224.39

Date: 2026-06-10

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Provider: Maroc Telecom (AS6713)
• Geolocation: Casablanca, Morocco (33.59°N, -7.62°E)
• Network Role: Residential endpoint
• Subnet: 154.144.0.0/16 (RIR: AFRINIC)

Threat Indicators:

• No direct malicious activity detected (no malware, phishing, or known campaigns).
• DNSBL Listings: 4/8 blacklists (potential spam or abuse risk).

Network Classification:

• Residing in a residential subnet with minimal infrastructure risk.

---

**2. Observation History**

• Recent Activity (Last 30 Days):

- 12 total observations, with 4 DNSBL listings (high-severity risk).

- No persistent threats or campaign correlations.

- Stability score: 0 (unstable network behavior).

Key Findings:

• The IP has been flagged by 4/8 DNS blacklists, suggesting potential spam or abuse.
• No active services, open ports, or TLS certificates detected.
• No HTTP server banners or domain associations.

---

**3. Relationships & Network Context**

• Subnet: 154.144.0.0/16 (Maroc Telecom)
• Neighbors: 0 active IPs in the /24 subnet (isolated or sparse usage).
• Shared Entities: No linked organizations, hostnames, or certificates.

Abuse Density:

• Subnet abuse density: 0% (low risk of malicious activity in the broader network).

---

**4. Actionable Insights**

• Monitor DNSBL Status: Investigate why this residential IP is listed on 4 DNS blacklists. Possible false positives or compromised devices.
• Check for Anomalies: Despite no active services, the high risk score and DNSBL flags warrant closer scrutiny for potential misuse.
• Network Segmentation: Consider isolating this IP if it’s part of a larger residential network with mixed risk profiles.

Recommendation:

• Flag for further investigation due to DNSBL listings.
• No immediate firewall action required unless additional threats are detected.

---

Source: IPDebrief Threat Intelligence Platform

Note: This IP is residential and managed by a telecom provider, but its DNSBL status suggests potential abuse. Monitor for behavioral changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.