## IP Intelligence Briefing: 103.158.158.227
Classification: Low Risk (Score: 30)
Report Date: 2026-07-24
---
Executive Summary
IP address 103.158.158.227 presents a low-risk profile with a risk score of 30/100. The IP is currently classified as "Firewalled / No Services" with no active open ports or detected services. While the overall threat indicators are minimal, the IP appears listed on 2 of 8 DNSBL checks, and routing stability is not confirmed.
---
Ownership and Registration
- ASN: 139325
- BGP Prefix: 103.158.158.0/24
- Organization: Not identified
- Registration Date: Not available
- RIR Registry: Not available
- Route Stability: False (isRouteStable: false)
---
Geolocation and Network Positioning
- Country: Bangladesh (BD)
- Coordinates: 23.7018°N, 90.3742°E
- GeoValidation Status: Not Plausible
- Timezone: Not available
- Network Classification: No services detected
---
Threat Indicators
| Indicator | Status |
|---|---|
| Is Tor Exit Node | No |
| Is Known Attacker | No |
| Is Spam Source | No |
| Blacklist Count | 0 |
| Pulsedive Risk | Not available |
| Honeypot Hits | 0 |
| Enumeration Strikes | 0 |
| WAF Violations | 0 |
DNSBL Status: Listed on 2 of 8 total DNSBL lists (medium severity)
---
DNS and Service Analysis
- PTR Hostnames: None detected
- Forward Resolution: Not confirmed
- Open Ports: None detected
- TLS Certificate: None
- HTTP Title: None
- Email Authentication: No SPF/DMARC records
- DNSSEC: Valid
---
Historical Observations
Eight signal observations recorded as of 2026-07-24:
- DNSSEC Validation: Validated (signal 2342)
- Geolocation: Bangladesh (signal 7)
- DNSBL Listings: 2 out of 8 lists, medium severity (signal 2344)
- Overall Confidence: Variable (0.17–0.90)
---
Neighborhood Analysis (103.158.158.0/24)
| IP Address | Risk Score | Authority Score | Classification |
|---|---|---|---|
| 103.158.158.11 | 55 | 50 | Elevated |
| 103.158.158.109 | N/A | N/A | Unknown |
| 103.158.158.122 | N/A | N/A | Unknown |
| 103.158.158.230 | 25 | 50 | Low Risk |
Subnet Abuse Density: 0
Neighboring Threat IPs: 0 high-risk, 1 medium-risk, 1 low-risk
---
Relationships and Correlation
No related entities (subnets, hostnames, organizations, certificates) identified in relationship graph.
---
Recommended Actions
1. Monitoring: Continue monitoring due to DNSBL listings and unstable routing
2. Block Lists: Consider adding to block list if DNSBL listings are for spam/malicious activity
3. Traffic Analysis: No active services detected; if traffic is observed, investigate purpose
4. Neighbor Monitoring: Monitor 103.158.158.11 (risk score 55) for potential correlated activity
---
Intelligence Notes
The IP lacks comprehensive ownership data and shows route instability. While current risk assessment is low, the presence on DNSBL lists and elevated-risk neighbors warrants continued observation. No active malicious indicators detected in behavioral analysis.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-ASBLINK-BD |
| ASN | AS139325 |
| Network Name | IQTEL-BD |
| CIDR Block | 103.158.158.0/24 |
| RIR | APNIC |
| Country | BD |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS139325 |
| Network Prefix | 103.158.158.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-07 00:23:26 UTC |
| Last Seen | 2026-08-27 06:10:52 UTC |
| Profile Built | 2026-08-29 05:36:23 UTC |
| Data Freshness | Live |
| Signal Types | 13 |
| Total Observations | 15 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.158.158.227
Who owns the IP address 103.158.158.227?
103.158.158.227 is registered to IRT-ASBLINK-BD. The address falls within the 103.158.158.0/24 network block. Registration is held at APNIC.
Where is 103.158.158.227 located?
Geolocation data places 103.158.158.227 in Bangladesh. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.158.158.227 malicious or safe?
103.158.158.227 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.