154.90.70.254
# IPDEBRIEF INTELLIGENCE BRIEFING
Target: 154.90.70.254/32
Assessment Date: Current Session
Risk Classification: MODERATE RISK (Score: 50/100)
---
## OWNERSHIP & NETWORK ATTRIBUTES
The IP address belongs to ASN 215925 (Cloud Innovation Support), registered with AFRI NIC under the CIDR block 154.90.70.0/24. Network role is classified as "Firewalled / No Services" with no open ports detected. The subnet contains 19 sibling IPs with low abuse density and 17 of 19 neighbors classified as low risk.
## GEOLOCATION ANALYSIS
Primary geolocation indicates Moscow, RU (Europe/Moscow timezone). Multiple observation signals show conflicting geolocation data, with some probes resolving to Seychelles coordinates. Distance validation shows ICMP blocked during probe attempts.
## THREAT INDICATORS
No active threat indicators detected:
- Not a known attacker, spam source, or Tor exit node
- Zero blacklisting on major threat feeds
- No known campaign associations
- No active malicious services or open ports
However, DNSBL analysis shows 2 listings out of 8 total lists checked, with maximum severity rated "high" in historical observations.
## OBSERVATION HISTORY
Forty historical observations recorded. Signals indicate:
- Ownership stability with no changes observed
- Threat persistence at zero days
- No persistently malicious classification
- Geolocation inconsistencies between probes
## RELATIONSHIP NETWORK
Relationship graph shows only same-network associations (154.90.70.0/24). No links to external organizations, hostnames, certificates, or related IP infrastructure detected.
## SECURITY RECOMMENDATIONS
Given the moderate risk score and DNSBL listings, the following actions are recommended:
Firewall Blocking:
```
iptables -A INPUT -s 154.90.70.254 -j DROP
nft add rule inet filter input ip saddr 154.90.70.254 drop
```
WAF Integration:
- Cloudflare WAF: Block with expression `ip.src eq 154.90.70.254`
- AWS WAF: Include address 154.90.70.254/32 in block list
Note: Recommendations are probabilistic and should be validated against additional threat intelligence sources before implementation.
---
Classification: SOC Intelligence Report
Action Priority: MEDIUM (Monitor and evaluate based on operational context)
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cloud Innovation Support |
| ASN | AS215925 |
| Network Name | 154.90.70.0 - 154.90.70.255 |
| CIDR Block | 154.90.70.0/24 |
| RIR | AFRINIC |
| Country | RU |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS215925 |
| Network Prefix | 154.90.70.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 20% | 2 | 2 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 12% | 2 | 2 |
| reputation | 11% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 13% | 9 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-03 23:05:07 UTC |
| Last Seen | 2026-09-29 03:06:31 UTC |
| Profile Built | 2026-09-29 03:06:46 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 18 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 154.90.70.254
Who owns the IP address 154.90.70.254?
154.90.70.254 is registered to Cloud Innovation Support. The address falls within the 154.90.70.0/24 network block. Registration is held at AFRINIC.
Where is 154.90.70.254 located?
Geolocation data places 154.90.70.254 in Moscow, Moscow, Russia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 154.90.70.254 malicious or safe?
154.90.70.254 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.