103.141.133.203
Analysis of IP address 103.141.133.203 classified the host as low risk with a reputation score of 30. Ownership records attributed the address to ASN 137655 (IRT-ITSO-IN) under the APNIC RIR, with geolocation data placing the infrastructure in Fazilka, Punjab, India.
Passive reconnaissance indicated the host functioned as a web server exposing TCP services on ports 80, 443, 22, and 8080. The SSH banner identified the software as OpenSSH version 8.7. TLS certificates were present, but the issuer string `root@centos9` indicated a self-signed or internal certificate authority rather than a public trust chain.
DNS enumeration returned a PTR record of `203-133-141-103.angelbroadband.com`, while forward resolution confirmation remained unverified. The domain `angelbroadband.com` utilized SPF records but lacked DMARC policy configuration.
Threat intelligence screening detected zero active indicators. The IP was not listed on blacklists, was not identified as a Tor exit node, and showed no association with known campaigns, spam sources, or attacker infrastructure. No specific hosting, CDN, or proxy roles were confirmed.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-ITSO-IN |
| ASN | AS137655 |
| Network Name | ITSO |
| CIDR Block | 103.141.133.0/24 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 203-133-141-103.angelbroadband.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 203-133-141-103.angelbroadband.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| 8080 | http-alt | tcp | — |
| Closed Ports | 25, 3389, 8443 (4 open / 7 scanned) | ||
| Server | Apache/2.4.62 (CentOS Stream) OpenSSL/3.2.2 mod_fcgid/2.3.9 |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_8.7 |
🔐 TLS Certificate
E=root@centos9, CN=centos9, O=Unspecified, C=US was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | centos9 |
| Valid From | 2024-09-04T17:43:39+00:00 |
| Valid Until | 2025-09-04T17:43:39+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 27AFDE7D33C20F2E |
| Thumbprint | 42BB5836DF76461C02E84F90EEBFE5682A48BAC4 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims US but primary geo says IN
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-01 06:37:56 UTC |
| Last Seen | 2026-09-01 06:37:56 UTC |
| Profile Built | 2026-09-01 06:48:53 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.