103.165.116.141📋 Copy

# IP Intelligence Briefing: 103.165.116.141/32

Date: Current

Classification: Low Risk

Risk Score: 25

## Executive Summary

IP address 103.165.116.141/32 was analyzed across multiple threat intelligence dimensions. The IP maintains a low-risk profile with a risk score of 25 out of 100. The address is associated with IRT-CHOTA-IN (CHOTA network) under ASN 141858 within the APNIC RIR region. Current network services show no open ports and no active web services. The subnet exhibits minimal abuse activity with clean classification.

## Ownership and Network Classification

• ASN: 141858
• Organization: IRT-CHOTA-IN
• Network Name: CHOTA
• CIDR Block: 103.165.116.0/23
• RIR: APNIC
• Network Role: Firewalled / No Services
• Infrastructure Type: Not identified as cloud, CDN, VPN, proxy, or hosting service

Geolocation data indicates positioning in New York, US, though ASN registration data suggests APNIC registry alignment. Multiple geolocation signals observed with coordinates near 20.59°N, 78.96°E (India region, confidence 0.52).

## Threat Indicators

• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Threat Feeds: None detected
• Campaign Correlation: No known campaign matches
• DNSBL Listed: 1 out of 8 total lists (operator score: 0.1304)

## Network Services and DNS Analysis

• Open Ports: None detected
• TLS Certificate: Not observed
• HTTP Title: Not observed
• PTR Records: None
• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Authentication: No SPF, DMARC, or TXT records configured

## Neighborhood Analysis (103.165.116.0/24)

• Subnet Classification: Clean
• Abuse Density: 0
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0
• Neighbor Risk Distribution: 0 high, 0 medium, 1 low

Adjacent IP 103.165.116.157 identified with risk score 25 and authority score 50. No elevated threat activity observed in the immediate neighborhood.

## Observation History

Thirteen observations recorded across multiple signal types. Recent activity (2026-07-29) shows consistent geolocation signals, traceroute data indicating 30 hops with 3 timeouts through Comcast transit networks, and organization registration data from APNIC. The IP demonstrates temporal stability with no ownership changes recorded.

## Control Plane Data

• BGP Prefix: 103.165.116.0/24
• Route Stability: Flagged as unstable (isRouteStable: false)
• Route Changes (30d): 0
• RPKI State: Not verified
• IRR Consistency: Not verified
• DNSSEC Valid: True
• CAA Records: Not present

## Behavioral Indicators

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Threat Persistence Days: 0
• Persistently Malicious: False

## Recommended Actions

No specific firewall rules or security actions were generated based on the current risk profile. The low-risk classification and absence of active threat indicators suggest routine monitoring is appropriate. Standard network traffic analysis and log monitoring recommended for operational visibility.

Analysis Conclusion: IP 103.165.116.141/32 presents a low-threat profile with no active malicious indicators. The subnet maintains clean classification with minimal abuse density. Continue standard monitoring protocols and correlate with internal threat intelligence as applicable.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.