103.115.40.171
## THREAT INTELLIGENCE BRIEFING: 103.115.40.171/32
Classification: Low Risk — No Active Threat Indicators
Intel Date: 2026-07-29
---
Executive Summary
IP 103.115.40.171 is assigned to Ybnetwork (ASN 55933) within the 103.115.40.0/22 CIDR block. The IP carries a risk score of 25 (Low Risk) with no open ports, no active services, and no known threat associations. No open ports detected, no TLS certificates, and no HTTP responses observed during scanning.
---
Technical Profile
| Attribute | Value |
|---|---|
| **ASN** | 55933 |
| **Organization** | IP administrator (Ybnetwork) |
| **RIR** | APNIC |
| **Country** | Hong Kong (HK) |
| **BGP Prefix** | 103.115.40.0/23 |
| **Network Role** | Firewalled / No Services |
| **DNSBL Listed** | 1 of 8 feeds |
---
Threat Assessment
- Risk Score: 25 / 100 (Low)
- Threat Indicators: None detected
- Campaign Associations: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0
Control Plane Observations:
- Route stability: False
- RPKI State: Not validated
- IRR Consistency: Not validated
- DNSSEC: Valid
---
Geographic Validation
- Claimed Location: Hong Kong (22.4°N, 114.11°E)
- Validation Status: ICMP blocked — Unable to validate
- Distance Discrepancy: 8,033.2 km from probe origin
- Geo Plausibility: True (consensus)
---
Network Behavior & Services
- Open Ports: None
- TLS Certificates: None
- HTTP Title: None
- Server Banner: None
- Forward Resolution: Confirmed (0 hostnames)
- Reverse DNS (PTR): None
---
Observation History (13 Signals)
Recent observations (2026-07-29) indicate:
- Service Scanning: Multiple ports scanned
- Geographic Inconsistencies: Mixed geolocation data reported (HK vs China claims)
- ICMP Validation: Blocked
- Ownership Changes: 0 detected
- Threat Persistence: Not persistently malicious
---
Subnet Context
- Subnet: 103.115.40.0/24
- Abuse Density: 0%
- Neighbor Count: 0
- Risk Distribution: None (high/medium/low)
- Threat Siblings: 0
---
Relationship Graph
- 4 Relationships: All to same network "Ybnetwork"
- No external relationships to hostnames, organizations, or certificates detected
---
Recommended Actions
| Tool | Action |
|---|---|
| **Firewall (iptables/nftables)** | No blocking required — Low risk score |
| **Cloudflare WAF** | No rules needed |
| **AWS WAF** | No rules needed |
| **Security Monitoring** | Monitor for service activation or port opens |
| **DNS Monitoring** | No changes required |
---
Analyst Notes
This IP presents minimal threat. The single DNSBL listing warrants periodic review but does not constitute active malicious behavior. No services are currently exposed, and the subnet shows no abuse density. Standard monitoring is appropriate. No immediate defensive action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IP administrator |
| ASN | AS55933 |
| Network Name | Ybnetwork |
| CIDR Block | 103.115.40.0/22 |
| RIR | APNIC |
| Country | HK |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 1 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-24 02:12:36 UTC |
| Last Seen | 2026-07-29 20:49:23 UTC |
| Profile Built | 2026-07-29 21:00:05 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 17 |
Full dossier details are available via our API.