103.179.239.30📋 Copy

# IP Intelligence Briefing: 103.179.239.30/32

## Executive Summary

IP address 103.179.239.30 presents as a low-risk infrastructure endpoint with no active threat indicators. The address is assigned to IRT-TUFANONLINE-BD under ASN 149453 within the APNIC RIR region. No malicious activity, campaign associations, or persistent threat behavior have been observed. Recommended operational posture: routine monitoring with no immediate blocking required.

---

## Infrastructure Profile

Ownership & Registry

• Organization: IRT-TUFANONLINE-BD
• Network Name: TUFANONLINE-BD
• CIDR Block: 103.179.238.0/23
• ASN: 149453
• RIR: APNIC
• Abuse Contact: Available via RDAP

Geolocation

• Country: Hong Kong (HK)
• City: Hong Kong
• Timezone: Asia/Hong_Kong
• Geo Validation: Flagged as implausible (distance anomaly detected)

Network Classification

• Service Purpose: Firewalled / No Services
• Infrastructure Type: Unknown
• Cloud/CDN/Proxy: Negative across all categories
• Mobile/Residential: Negative
• Bogon/Anycast: Negative

---

## Threat Assessment

Risk Metrics

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: Not calculated
• Blacklist Status: Clean (0 blacklists)

Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threat Feeds: None detected
• Campaign Associations: None identified

Network Behavior

• Open Ports: None detected
• HTTP/HTTPS Services: None observed
• TLS Certificates: None
• Email Authentication: SPF/DMARC not configured (no email activity observed)

---

## Temporal Analysis & History

Observation Timeline

• Total Observations: 12 signals recorded
• Most Recent Activity: 2026-07-29
• Ownership Changes: 0 (stable ownership)
• Threat Persistence Days: 0
• Total Threat Observations: 0
• Persistently Malicious: No

Signal Evolution

• No degradation in security posture over time
• No emergence of new threat indicators
• Consistent network classification across observation window

---

## Neighborhood Analysis

Subnet: 103.179.239.0/24

• Total Siblings: 1
• Abuse Density: 0.00
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 1

Identified Neighbor:

• IP: 103.179.239.206
• Risk Score: 25
• Authority Score: 50
• Classification: Low Risk

The /24 subnet demonstrates minimal abuse density with no correlation to known malicious actors.

---

## Control Plane & Routing

BGP Information

• Origin ASN: 149453
• BGP Prefix: 103.179.239.0/24
• Route Changes (30d): 0
• Route Stability: Unstable flag set
• RPKI State: Not validated
• IRR Consistency: Not validated

DNS Security

• DNSSEC: Valid
• DNSBL Listings: 1 of 8 total lists (minor concern)
• CAA Records: Not configured

Traceroute Characteristics

• Hop Count: 12
• First Hop RTT: 0.2ms
• Last Hop RTT: 270.2ms
• Timed Out Hops: 3
• Transit Networks: Comcast, Lumen

---

## Relationship Graph

Connected Entities:

• TUFANONLINE-BD (Same Network) - Listed twice in relationship graph

No external organization, certificate, or hostname relationships beyond network-level association.

---

## Operational Recommendations

Immediate Actions:

• No firewall blocking required
• No WAF rules recommended
• No rate limiting required

Monitoring Considerations:

• Monitor for service emergence on previously closed ports
• Watch for DNSBL listing expansion
• Track subnet activity changes
• Maintain baseline for comparison against neighbor 103.179.239.206

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.