103.171.68.113📋 Copy

# IP Intelligence Briefing: 103.171.68.113/32

Generated: 2026-07-18 | Classification: Low Risk

---

## Executive Summary

IP address 103.171.68.113 is a low-risk residential or hosting endpoint associated with Multilink International (ASN 142627). The IP shows no active services, no known threat indicators, and belongs to a subnet classified as clean with zero abuse density. SOC teams may treat this IP as benign for now, though monitoring for geographic inconsistencies is recommended.

---

## Ownership and Network Classification

• Organization: Multilink International (MULTILINK-BD)
• ASN: 142627
• CIDR Block: 103.171.68.0/23
• RIR: APNIC (Asia-Pacific)
• Abuse Contact: islam@multilinkisp.com
• Network Role: Firewalled / No Services

---

## Geolocation Analysis

Primary Location: London, GB (Geolocation Source: 2)

Historical Signals: Bangladesh (BD) observed in multiple recent probes

Status: Geographic consensus not achieved (geoConsensus: false)

*Note: Geographic discrepancies exist between RIR registration data and live signal observations. This pattern may indicate proxy usage, misconfigured DNS, or legitimate multi-region hosting.*

---

## Risk Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not applicable
• DNSBL Listings: 1 of 8 lists
• Known Campaigns: None detected
• Campaign Likelihood: Not assessed
• Threat Persistence: 0 days observed

---

## Service and DNS Profile

• Open Ports: None detected
• DNS Resolution: Forward resolution count: 0
• PTR Records: None
• HTTPS/TLS: Not detected
• HTTP Services: Not detected

*The IP is effectively firewalled with no accessible services, reducing attack surface.*

---

## Neighborhood Analysis (103.171.68.0/24)

• Subnet Classification: Clean
• Abuse Density: 0%
• Total Neighbors: 7
• Threat Siblings: 0

Neighbor Risk Distribution:

*Neighboring IPs show mixed risk profile but subnet remains classified as clean.*

---

## Historical Signal Observations

Total Observations: 13

Recent Activity: July 18, 2026

• Geolocation signals show Bangladesh coordinates
• ASN signals confirm Multilink International ownership
• Subnet abuse density remained at 0 across observations
• No persistent malicious behavior detected

---

## Control Plane Intelligence

• Route Stability: FALSE (route changes detected in 30-day window)
• RPKI State: Not validated
• IRRS Consistency: Not assessed
• BGP Origin ASN: 142627
• DNSSEC Validation: Valid
• Timed Out Hops: 13 of 30

---

## Recommended Actions

Based on current risk profile (Score: 25), no immediate blocking or mitigation actions are recommended. However, the following observations warrant ongoing monitoring:

1. Geographic Discrepancy: Continue monitoring for persistent BD/GB location conflicts

2. DNSBL Listing: Investigate source of single DNSBL listing

3. Route Instability: Verify if route changes correlate with network maintenance or abuse incidents

Firewall Policy: Allow with logging, or block if the IP demonstrates malicious behavior in conjunction with other signals.

---

## Related Entities

• Same Network: MULTILINK-BD (2 relationships identified)
• Correlated IPs: None detected
• Certificate Matches: None

---

Intelligence Quality: Moderate – Limited active signal data, but consistent ownership attribution.

Recommended Review Period: 30 days

Threat Level: LOW

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.