103.120.153.229📋 Copy

# IP Intelligence Briefing: 103.120.153.229

## Executive Summary

IP 103.120.153.229 is a low-risk infrastructure address assigned to Indian organization manager it (ASN 137085, netname DSTECH). The address shows minimal malicious activity indicators and operates within a subnet with negligible abuse density. No active services or ports are currently detected.

## Technical Profile

• Risk Score: 25 (Low Risk)
• ASN: 137085 (manager it)
• Organization: DSTECH
• Country/Region: India, Kaithal (HR)
• CIDR Block: 103.120.152.0/23
• RIR: APNIC
• Network Role: Firewalled / No Services
• Geolocation Accuracy: 1,500 km radius (low precision)

## Threat Indicators

No active threat indicators were identified:

• Abuse Confidence Score: Not applicable
• Known Attacker Status: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listings: 1 of 8 total lists (dnsblListedCount)

The IP shows no evidence of persistent malicious behavior with zero threat observation count and no persistent malicious classification.

## Network Behavior & Routing

BGP routing observations reveal the IP originates from AS137085 with AS path: 2497 → 9498 → 137085. Route stability is marginal (isRouteStable: false) with one route change recorded in the last 30 days. The address is not classified as MoAS (Multiple Origin Autonomous System).

## Subnet Neighborhood Analysis

The /24 subnet (103.120.153.0/24) contains 51 total neighbors with the following risk distribution:

• High Risk: 0
• Medium Risk: 1
• Low Risk: 47

Abuse density for the subnet is 0. Several neighbor addresses (e.g., 103.120.153.193, 103.120.153.195) share the same risk score of 25, indicating consistent classification across the subnet. No threat siblings were identified.

## Service & Port Analysis

No open ports were detected. Service reconnaissance returned:

• Open Ports: None
• TLS Certificate: Not detected
• HTTP Title: Not detected
• Server Banner: Not detected
• Hosted Domains: 0
• PTR Hostnames: None

The address shows no DNS resolution activity and no email authentication records (SPF, DMARC absent).

## Historical Observations

Fourteen observations were recorded for this IP. Recent activity includes:

• BGP Routing: Multiple observations of AS path propagation
• Geolocation Signals: Confirmed Indian origin with multiple source corroboration
• Route Changes: One change detected within the 30-day observation window

No significant temporal patterns indicate escalating or diminishing risk posture.

## Relationship Graph

Four relationships were identified, all classified as "Same Network" with target value DSTECH. No external relationships to organizations, hostnames, certificates, or subnets beyond the immediate network block were detected.

## Security Recommendations

Based on the low-risk profile and absence of malicious activity indicators:

• Block Rule: Not required
• Monitoring: Standard network logging sufficient
• Firewall Policy: Permissive or allow-list based on business requirements
• WAF Rules: No specific rules required

## Conclusion

IP 103.120.153.229 presents a minimal threat profile. The address is owned by a legitimate Indian organization with no evidence of abuse, malicious activity, or suspicious network behavior. Standard monitoring practices are adequate for this asset.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.