103.19.252.2📋 Copy

# IP Intelligence Briefing: 103.19.252.2/32

Date: 2026-07-30

Analyst: IPDebrief Intelligence Team

Classification: Defensive Security Intelligence

---

## Executive Summary

Target IP 103.19.252.2 presents as a low-risk address with minimal threat indicators. The IP belongs to ASN 135407 (TES-PL-PK) and shows characteristics of a firewalled endpoint with no active services. Historical observations indicate low abuse density within the /24 subnet.

---

## Technical Profile

Network Assignment:

• IP Address: 103.19.252.2
• ASN: 135407 (TES-PL-PK)
• Organization: Zx Online Ltd administrator
• CIDR Block: 103.19.252.0/24
• RIR: APNIC
• Geolocation: US (New York, NY) / Historical data indicates BD (Bangladesh) for ASN allocation

Network Classification:

• Status: Firewalled / No Services
• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• PTR Records: Not resolved

Threat Indicators:

• Risk Score: 25 (Low Risk)
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0 (control plane indicates 1 of 8 DNSBL lists)
• Campaign Affiliations: None detected

---

## Neighborhood Analysis

Subnet Assessment: 103.19.252.0/24

• Abuse Density: 0 (No abuse detected in subnet)
• Neighbor IPs: 6 additional addresses identified
• Risk Distribution: All 6 neighbors show low risk (risk score: 25)
• Authority Scores: All neighbors score 50

Neighbor Inventory:

---

## Historical Observation Timeline

Observation Count: 10 signals recorded

Recent Activity: 2026-07-29

Key Historical Signals:

• 2026-07-29 23:11:34: Blacklist listing activity detected (8 total lists, 1 listed, max severity: high)
• 2026-07-29 23:11:32: DNSSEC validation confirmed (true)
• 2026-07-29 23:11:31: ASN registration data confirmed (ASN 135407, allocated 2013-04-08)
• 2026-07-29 23:11:31: No PTR record resolution

Temporal Indicators:

• Ownership Changes: 0
• Threat Persistence: 0 days
• Threat Observation Count: 0
• Persistently Malicious: No

---

## Control Plane Analysis

Routing Stability:

• Route Stable: No
• Route Changes (30d): 0
• MOAS: No
• RPKI State: Not validated

DNS Configuration:

• DNSSEC Valid: Yes
• CAA Records: No
• DNSBL Listed: 1 of 8 total lists

Traceroute Results:

• Hop Count: 17
• First Hop RTT: 0.2ms
• Last Hop RTT: 224.9ms
• Timed Out Hops: 4
• Transit Network: Comcast

---

## Relationship Graph

Identified Relationships:

• Same Network: TES-PL-PK (2 instances)
• No external hostname, organization, or certificate relationships detected

---

## Security Recommendations

Current Assessment: No immediate blocking required based on risk profile.

Suggested Actions:

• Monitor for service changes (currently firewalled with no open ports)
• Standard logging recommended for baseline traffic analysis
• No specific firewall rules generated due to low-risk classification
• Continue monitoring blacklist status (1 of 8 DNSBL lists flagged)

Priority: Low

---

## Conclusion

IP 103.19.252.2 demonstrates characteristics of a low-risk, firewalled endpoint with no active services. The /24 subnet shows consistent low-risk scores across all neighbor addresses with zero abuse density. Historical data confirms DNSSEC validity and stable ownership since 2013. No evidence of malicious activity, campaign affiliations, or persistent threat behavior. SOC teams may apply standard monitoring procedures without immediate blocking actions.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.