103.133.28.23📋 Copy

# IP INTELLIGENCE BRIEFING: 103.133.28.23

## Executive Summary

Target IP 103.133.28.23 presents a Moderate Risk profile (Risk Score: 60/100) with no active threat indicators. The address is associated with mobile carrier infrastructure in India and currently exhibits no malicious activity.

---

## Network Profile

## Infrastructure Classification

• Network Role: Mobile Carrier Infrastructure
• Connection Type: Mobile
• Infrastructure Type: Mobile Carrier
• Open Ports: None detected
• Services: No active services (Firewalled / No Services)
• Proxy/VPN/Tor: Negative indicators across all categories
• Cloud/CDN/Hosting: Negative indicators

## Threat Intelligence Indicators

• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Campaigns: None identified
• Is Known Attacker: No
• Is Spam Source: No
• Is Tor Exit Node: No

## Historical Observations

Analysis of 19 signal observations indicates:

• Most recent observation: 2026-07-22
• Geographic consistency: India (IN) with multi-signal inference
• Ownership stability: No ownership changes detected
• Threat persistence: 0 days
• Neighborhood classification: Clean with 0 abuse density

## Neighborhood Analysis

Subnet: 103.133.28.23/24

• Abuse Density: 0
• Classification: Clean
• Total Siblings: 3
• Active Siblings: 0
• Threat Siblings: 0

Neighbor IPs:

## DNS Analysis

• PTR Hostname: 103.133.28.23.bsltechnologies.co.in
• Forward Resolution: Confirmed
• Hosted Domain Count: 0
• SPF/DMARC: Not configured

## Recommended Security Actions

Priority: Monitor

Action: Increase logging verbosity and review recent activity from this IP

Rationale: Elevated risk score (60/100) warrants enhanced monitoring

Recommended Blocking Rules

```bash

# iptables

iptables -A INPUT -s 103.133.28.23 -j DROP

# nftables

nft add rule inet filter input ip saddr 103.133.28.23 drop

# nginx

deny 103.133.28.23;

# pfSense

103.133.28.23/32

# Cloudflare WAF

{"description":"Block 103.133.28.23 — IPDebrief risk score 60","action":"block","filter":{"expression":"ip.src eq 103.133.28.23"}}

# AWS WAF

{"Addresses":["103.133.28.23/32"],"Description":"IPDebrief risk 60"}

```

---

## Intelligence Assessment

Target 103.133.28.23 is classified as mobile carrier infrastructure with moderate risk scoring. While no active threat indicators are present, the IP should be monitored for:

• Changes in service patterns or open ports
• Geolocation anomalies
• Neighborhood abuse density changes
• DNS resolution anomalies

SOC Analyst Recommendation: Block at network perimeter with enhanced logging enabled for the 103.133.28.0/24 subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.