103.177.150.146📋 Copy

## IP Intelligence Briefing: 103.177.150.146

Executive Summary

IP address 103.177.150.146 presents a moderate risk profile (risk score: 40). The address is associated with APNIC-allocated IP space and exhibits conflicting geolocation data between GB and BD. The IP is not currently classified as an active attacker, spam source, or Tor exit node. Two DNSBL listings were detected across eight total lists.

Risk Assessment

• Overall Risk Score: 40 (Moderate Risk)
• Reputation Classification: Moderate Risk
• Control Plane Stability: Route changes recorded over the past 30 days; route stability flag false
• Operator Score: 0.1304 (Minimal)
• DNSBL Status: Listed on 2 of 8 blacklists

Geolocation Discrepancy

Conflicting geographic indicators observed:

• Primary: GB (London), Europe/London timezone
• Historical: BD (Bangladesh, Jamalpur sadar), RIR: APNIC
• Geographic Validation: geo_plausible flag false

Network Classification

• ASN: 149060
• BGP Prefix: 103.177.150.0/24
• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificates: None detected
• Hosted Domains: 0

Threat Indicators

• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Campaign Likelihood: Not applicable (no cert matches, banner matches, or correlated IPs)
• Threat Indicators: None detected in current threat feeds

Neighborhood Analysis (103.177.150.0/24)

• Total Subnet Neighbors: 15
• Abuse Density: 0
• Risk Distribution: 0 high-risk, 1 medium-risk, 9 low-risk
• Elevated-Risk Neighbors: Multiple neighbors (103.177.150.145, 147-151, 153, 155, 158, 159) with risk scores of 25-40
• Abuse Density Context: Low overall subnet abuse density

Observation History

• Total Observations: 11
• Recent Activity: Organization identified as IRT-SQUARENET-BD with abuse contact noc@squarenetbd.com
• Persistence: Not persistently malicious (threat persistence days: 0)
• Threat Observation Count: 0

Intelligence Conclusions

The IP address 103.177.150.146 is not currently exhibiting active malicious behavior. However, the moderate risk score warrants monitoring. The conflicting geolocation data between GB and BD may indicate routing anomalies or multi-region operations. The low abuse density in the immediate /24 subnet suggests this is not part of a coordinated abuse cluster, though adjacent IPs show elevated risk scores.

Recommended Actions

• Monitor for DNSBL listing additions
• Track route stability changes for 103.177.150.0/24 prefix
• Correlate with neighbor IP addresses (particularly 103.177.150.155) showing risk score 40
• No immediate blocking recommended; maintain logging for traffic analysis

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.