103.197.153.76📋 Copy

# Intelligence Briefing: 103.197.153.76

## Executive Summary

The IP address 103.197.153.76 is a low-risk infrastructure endpoint located in Dhaka, Bangladesh. Assigned to Sajjid Pasha under the LINK3-BD network block, the address demonstrates minimal threat indicators with a risk score of 25/100. The IP is currently firewalled with no active services, though DNSBL listings indicate prior abuse activity.

## Technical Profile

Network Attribution:

• ASN: 23688 (LINK3-TECH-AS-BD-AP - Link3 Technologies Ltd., BD)
• Organization: Sajjid Pasha
• CIDR Block: 103.197.152.0/22
• Geolocation: Dhaka Division, Dhaka, Bangladesh (23.75°N, 90.43°E)
• RIR: APNIC

Risk Assessment:

• Overall Risk Score: 25 (Low Risk)
• Reputation: Low Risk
• Abuse Confidence Score: Not reported
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Known Attack Source: No
• Spam Source: No
• Tor Exit Node: No

Network Services:

• Open Ports: None detected
• Service Classification: Firewalled / No Services
• TLS Certificates: None
• DNS Records: No PTR records, no forward resolution

## Threat Indicators

Current Threat Status:

• No active threat indicators detected
• No known malware campaigns associated
• No threat feed matches
• No honeypot hits or WAF violations recorded

Temporal Analysis:

• Threat persistence days: 0
• Ownership changes: 0
• Is persistently malicious: No
• Total incidents: 0

## Network Context

Subnet Analysis (103.197.153.0/24):

• Abuse Density: 0%
• Total Siblings: 4
• Active Siblings: 4
• Threat Siblings: 0

Neighbor IPs (Risk Score 25 - Low):

## Historical Observations

Recent intelligence captures (July 2026) indicate:

• DNSSEC validation confirmed for reverse zone (76.153.197.103.in-addr.arpa)
• Multiple DNSBL listings detected (8 total) with high severity ratings
• ASN consistently identified as Link3 Technologies Ltd., BD
• No certificate data resolved

## Relationship Mapping

Connected Entities:

• Network: LINK3-BD (same network block)

No additional relationships identified to organizations, hostnames, or certificates.

## Recommended Actions

For SOC Teams:

1. Monitor: Track for any changes in service status or threat indicators

2. Firewall Policy: Current configuration acceptable; no immediate blocking required

3. Reputation Watch: Monitor DNSBL listings for potential reputation degradation

4. Geographic Context: Dhaka-based infrastructure; assess against organizational geographic risk policies

Classification: Low Priority / Informational

Assessment Confidence: High (based on multiple data sources and consistent historical observations)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.