103.111.225.203
# IP Intelligence Briefing: 103.111.225.203/32
Classification: Low Risk | Jurisdiction: Bangladesh (BD) | ASN: 137526 | Organization: PLUSNETINC-BD
## Executive Summary
The IP address 103.111.225.203 presents a low-risk profile (score: 25/100) associated with PLUSNETINC-BD, a Plusnet administrator network block in Chittagong, Bangladesh. The address shows no active threat indicators, no open services, and no evidence of malicious activity. However, the /24 subnet demonstrates moderate abuse density with 3 medium-risk sibling addresses.
## Network Profile
- ASN: 137526 (PLUSNETINC-AS-AP - Plusnet Inc, BD)
- CIDR Block: 103.111.224.0/22 (apnic registry, allocated 2018-03-21)
- Geolocation: Chittagong, Bangladesh (22.35°N, 91.83°E)
- Geolocation Consensus: Confirmed across 1 source
- Route Stability: Route changes recorded (0 changes in 30 days), marked as not route-stable
## Threat Assessment
Current Risk Score: 25 (Low Risk)
- Abuse Confidence: Not scored
- Blacklist Status: 1 listing across 8 DNSBLs (max severity: high)
- Known Campaigns: None identified
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Proxy/VPN: No
- Cloud/CDN/Hosting: No
Threat Indicators: None present
## Service & DNS Status
- Open Ports: None detected
- DNS Records: No PTR hostnames, no forward resolution
- Hosted Domains: 0
- Email Authentication: SPF and DMARC not configured
- Service Purpose: Firewalled / No Services
## Historical Observation (11 Signals)
Recent observations (2026-07-24) indicate:
- ASN attribution confidence: 0.85
- DNSSEC validation: Valid
- Blacklist activity: 1 listing with high severity across 8 lists
- Network classification: Consistent non-residential, non-cloud, non-mobile profile
- No persistent malicious behavior observed
## Related Entities
- Network Relationships: PLUSNETINC-BD (Same Network)
- Certificate Matches: None
- Correlated IPs: 0
## Subnet Analysis (103.111.225.0/24)
- Total Siblings: 11
- Abuse Density: 0 (low)
- Risk Distribution: 0 High, 3 Medium, 4 Low
- Notable Higher-Risk Neighbors:
- 103.111.225.209 (Risk: 55)
- 103.111.225.74, 103.111.225.208 (Risk: 40)
- 103.111.225.78, 103.111.225.188, 103.111.225.230, 103.111.225.248 (Risk: 25)
## Recommended Actions
Firewall Policy: Monitor but no immediate block recommended
- The IP shows low-risk characteristics with no active malicious indicators
- Monitor for changes in threat indicators
- Be aware of 1 DNSBL listing with high severity
Investigation Triggers:
- Monitor for new threat indicators
- Watch for service activation (open ports, DNS activity)
- Correlate with subnet-level activity for 103.111.225.0/24
Context: The subnet shows moderate abuse density with 3 medium-risk IPs. While 103.111.225.203 itself is low-risk, analysts should be aware of related addresses in the /24 when evaluating traffic patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Plusnet inc administrator |
| ASN | AS137526 |
| Network Name | PLUSNETINC-BD |
| CIDR Block | 103.111.224.0/22 |
| RIR | APNIC |
| Country | BD |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS137526 |
| Network Prefix | 103.111.225.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 12% | 3 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-06 06:00:38 UTC |
| Last Seen | 2026-08-27 05:39:39 UTC |
| Profile Built | 2026-08-29 05:42:42 UTC |
| Data Freshness | Live |
| Signal Types | 13 |
| Total Observations | 15 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.111.225.203
Who owns the IP address 103.111.225.203?
103.111.225.203 is registered to Plusnet inc administrator. The address falls within the 103.111.224.0/22 network block. Registration is held at APNIC.
Where is 103.111.225.203 located?
Geolocation data places 103.111.225.203 in Chittagong, Chittagong, Bangladesh. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.111.225.203 malicious or safe?
103.111.225.203 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.