103.163.220.114📋 Copy

IP Intelligence Briefing: 103.163.220.114

Date: June 10, 2026

---

**1. Profile Summary**

• Risk Score: Moderate (50/100)
• Provider: XS Usenet (ASN 206092)
• Geolocation: Japan (Tokyo), latitude 35.68, longitude 139.75
• Network Role: Firewalled / No Services
• Threat Indicators: No direct malicious activity detected (no malware, phishing, or C2 indicators).

---

**2. Observation History**

• Geolocation Inference: Confirmed as Japan (Tokyo) with 100% consensus.
• DNSSEC Validity: Validated successfully.
• DNSBL Listings: Listed on 2/8 DNSBLs (potential spam or abuse risk).
• Ownership Stability: No changes in ownership over the past 30 days.

---

**3. Relationships & Network Context**

• Subnet: 103.163.220.0/24 (owned by XS Usenet).
• Neighbors:

- 100 total IPs in subnet.

- 12 IPs flagged as medium risk, 88 as low risk.

- No significant abuse density (abuseDensity: 0).

• Network Affiliation: Linked to XS Usenet (APNIC registry).

---

**4. Threat & Behavioral Analysis**

• Malicious Activity: No detected campaigns, honeypot hits, or WAF violations.
• Services: No open ports or TLS certificates identified.
• Behavioral Flags: No enumeration strikes or auto-banned status.

---

**5. Recommended Actions**

• Monitoring: Track DNSBL listings and geolocation consistency.
• Firewall Rules:

- iptables: `iptables -A INPUT -s 103.163.220.114 -j DROP`

- Cloudflare WAF: Block IP with rule `ip.src eq 103.163.220.114`

• SOC Guidance: No immediate mitigation required, but continuous monitoring is advised due to DNSBL flags and moderate risk score.

---

Conclusion:

The IP exhibits moderate risk due to DNSBL listings but shows no direct malicious activity. Monitor for anomalies in geolocation or network behavior. No urgent action required unless further threats emerge.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.