103.113.192.143📋 Copy

# IP Intelligence Briefing: 103.113.192.143

## Executive Summary

Risk Rating: Moderate (Score: 40/100)

Classification: Passive Infrastructure – Firewalled with No Services

Geolocation: Bangladesh (APNIC RIR)

Provider: IRT-NBN-BD (ASN: 137703)

---

## Network Profile

The IP address 103.113.192.143 is assigned to IRT-NBN-BD within the Noakhali Broadband Network infrastructure (CIDR: 103.113.192.0/22). The address falls under APNIC RIR jurisdiction, allocated on 2018-04-16. Network ownership shows zero changes, indicating stable provisioning.

Network Classification:

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: No PTR records; no forward resolution
• Hosted Domains: 0
• TLS/HTTP Services: None detected

---

## Threat Assessment

Threat Indicators: None identified

Campaign Affiliation: No known campaigns

Attacker Status: Not flagged as active attacker

Spam Source: Not identified

Tor Exit Node: Not a Tor exit node

Blacklist Status:

• DNSBL Listed: 2 of 8 total lists
• No high-severity abuse indicators
• Abuse Confidence Score: Not calculated (insufficient data)

Behavioral Analysis:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0

---

## Neighborhood Analysis

Subnet: 103.113.192.0/24

Abuse Density: 0 (Low)

Total Sibling IPs: 2

Threat Siblings: 0

The /24 subnet demonstrates minimal abuse activity with no adjacent IPs flagged as malicious. This indicates the IP operates in isolation within its network segment.

---

## Historical Observation Timeline

Ten signal observations recorded, with recent activity (2026-07-24) showing:

---

## Recommended Security Actions

Firewall Rules

```bash

# iptables

iptables -A INPUT -s 103.113.192.143 -j DROP

# nftables

nft add rule inet filter input ip saddr 103.113.192.143 drop

# pfSense

103.113.192.143/32

```

WAF Rules

Cloudflare WAF:

```json

{

"description": "Block 103.113.192.143 — IPDebrief risk score 40",

"action": "block",

"filter": { "expression": "ip.src eq 103.113.192.143" }

}

```

AWS WAF:

```json

{

"Addresses": ["103.113.192.143/32"],

"Description": "IPDebrief risk 40"

}

```

---

## Intelligence Narrative

103.113.192.143 presents moderate risk primarily due to DNSBL listings on 2 of 8 threat intelligence feeds. The IP resides within Bangladesh-based broadband infrastructure operated by IRT-NBN-BD (ASN 137703). Despite the moderate risk score, behavioral indicators show no active malicious activity—no open services, no port scans, and no WAF violations.

The subnet exhibits low abuse density with zero threat-sibling IPs, suggesting the IP operates as passive infrastructure rather than an attack vector. However, the presence of DNSBL listings warrants defensive blocking as a precautionary measure. The IP's firewalled status (no detected services) indicates it may be a reserved, administrative, or internal-facing address with external connectivity restricted.

Recommendation: Implement defensive blocking rules at perimeter firewalls and WAF layers. Monitor for any changes in service activity or threat feed status.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.