103.115.156.121📋 Copy

IP INTELLIGENCE BRIEFING: 103.115.156.121

Classification: Moderate Risk (Score: 40/100)

Date: 2026-07-25

---

NETWORK OWNERSHIP & GEOLOCATION

• Organization: IRT-MHONLINE-BD (AS137842)
• Network: MHONLINE-BD (103.115.156.0/24)
• Country: Bangladesh (BD)
• RIR: APNIC
• Registration: Active under APNIC registry

RISK PROFILE SUMMARY

The IP exhibits moderate risk characteristics with a score of 40. No active threat indicators, known campaigns, or direct malicious activity detected. The IP is classified as firewalled with no open services or ports identified. DNSSEC validation is active (valid).

THREAT INDICATORS

• Blacklist Status: Listed on 2 out of 8 DNSBLs with maximum severity rated "high"
• Abuse Confidence: Not explicitly quantified in threat profile
• Tor/VPN/Proxy: Negative (not identified as exit node, proxy, or VPN endpoint)
• Known Attacker: No matches in threat feeds
• Spam Source: No classification

NETWORK NEIGHBORHOOD ANALYSIS

• Subnet: 103.115.156.0/24
• Abuse Density: 0 (clean subnet classification)
• Sibling IPs: 2 active neighbors
• Neighbor Risk: 103.115.156.228 (Risk Score: 25, Authority Score: 50)
• Threat Siblings: 0

OBSERVATION HISTORY (13 Signals)

• Most recent activity: 2026-07-25 15:04 UTC
• Signal types observed: Network classification, blacklist listings, DNSSEC validation, ownership stability
• No persistent malicious behavior detected over observation window
• Ownership stability: 0 changes recorded

RELATIONSHIP GRAPH

• Primary association: MHONLINE-BD network (4 relationship links)
• No external infrastructure links identified (no hostnames, certificates, or related organizations beyond network block)

RECOMMENDED ACTIONS

1. MONITOR: Track blacklist status due to 2 DNSBL listings with high severity

2. BLOCK (Optional): Consider blocking if traffic patterns indicate abuse; no confirmed malicious activity

3. INVESTIGATE: Review any inbound traffic for policy compliance given blacklist associations

4. NETWORK CONTEXT: Low-risk subnet environment with minimal neighbor threat indicators

INTELLIGENCE NARRATIVE

IP 103.115.156.121 belongs to MHONLINE-BD's infrastructure in Bangladesh and presents a moderate risk profile. While not flagged as a known attacker or spam source, the IP appears on 2 DNSBLs with high severity ratings, warranting monitoring. The subnet (103.115.156.0/24) maintains a clean classification with zero threat siblings. The IP shows no active services, no Tor/VPN/proxy characteristics, and stable ownership history. SOC teams should evaluate traffic patterns against organizational policy; the blacklist associations suggest potential misuse history despite current lack of observable malicious activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.