103.211.52.108
# Intelligence Briefing: 103.211.52.108/32
Classification: LOW RISK
Date: July 28, 2026
Analyst: IPDebrief Intelligence Division
---
## Executive Summary
IP address 103.211.52.108 is a low-risk infrastructure address assigned to Excitel IP Management (ASN 133982) in New Delhi, India. The IP demonstrates minimal threat indicators, no active services, and no evidence of malicious activity. Recommended action: Monitor without blocking.
---
## Network Ownership & Geolocation
| Field | Value |
|---|---|
| **Organization** | Excitel IP Management |
| **ASN** | 133982 |
| **Network** | EXCITELNITIN (103.211.52.0/22) |
| **Location** | New Delhi, National Capital Territory of Delhi, India |
| **Geolocation Confidence** | Plausible (6,239.2 km from probe origin) |
| **Registration** | APNIC RIR |
---
## Threat Assessment
| Metric | Value |
|---|---|
| **Risk Score** | 25/100 (Low Risk) |
| **Abuse Confidence** | Not applicable |
| **Blacklist Count** | 0 |
| **DNSBL Listings** | 1 of 8 lists |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Known Campaigns** | None detected |
---
## Technical Analysis
Network Role
- Status: Firewalled / No Services
- Open Ports: None detected
- Infrastructure Type: Not cloud, CDN, VPN, proxy, hosting, mobile, or residential
- Connection Type: N/A
DNS Analysis
- PTR Hostnames: None
- Forward Resolution: Not confirmed
- Hosted Domains: 0
- Email Authentication: SPF/DMARC not configured
- DNSSEC: Valid
- TXT Records: 0
Behavioral Indicators
- Honeypot Hits: 0
- Enumeration Strikes: None observed
- Threat Persistence: 0 days
- Ownership Stability: Consistent
---
## Observation History
Twelve signals observed on July 28, 2026. Key findings:
- Subnet classified as "clean" (8 total siblings, 3 active, 0 threats)
- Geolocation inferred as India (IN) with 52% confidence
- Ownership confirmed: Excitel IP Management
- ICMP validation blocked; geolocation plausible based on RTT data
---
## /24 Neighborhood Analysis (103.211.52.0/24)
| Neighbor IP | Risk Score | Authority Score |
|---|---|---|
| 103.211.52.12 | 25 | 50 |
| 103.211.52.26 | 40 | 50 |
| 103.211.52.52 | 0 | 50 |
| 103.211.52.56 | 0 | 50 |
| 103.211.52.75 | 40 | 50 |
| 103.211.52.78 | 15 | 50 |
| 103.211.52.116 | 40 | 50 |
Abuse Density: 0
Risk Distribution: 0 high, 3 medium, 4 low
Three neighboring IPs show elevated risk scores (40), suggesting potential shared infrastructure risk.
---
## Recommended Actions
| Priority | Action | Rationale |
|---|---|---|
| **Monitor** | Continue standard monitoring | Low risk profile |
| **Block** | Not recommended | No evidence of malicious activity |
| **Allow** | Standard network traffic permitted | Infrastructure appears legitimate |
Firewall Rules: No specific rules required. Standard allow policies applicable.
---
## Intelligence Notes
1. Infrastructure Classification: Excitel is a legitimate Indian ISP. The /22 block (103.211.52.0/22) contains multiple IPs with varying risk profiles.
2. Service Status: Target IP shows no open services and is classified as "Firewalled / No Services," suggesting it may be reserved, internal, or decommissioned.
3. Neighborhood Context: Three sibling IPs in the /24 subnet carry medium risk scores (40). Consider monitoring those addresses if the target shows anomalous behavior.
4. Threat Indicators: No active threat indicators present. The single DNSBL listing warrants awareness but does not indicate confirmed malicious activity.
---
End of Briefing
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Excitel IP Management |
| ASN | AS133982 |
| Network Name | EXCITELNITIN |
| CIDR Block | 103.211.52.0/22 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS133982 |
| Network Prefix | 103.211.52.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 17% | 2 | 3 |
| Overall | 17% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-18 11:33:27 UTC |
| Last Seen | 2026-09-03 18:43:58 UTC |
| Profile Built | 2026-09-03 18:47:42 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.211.52.108
Who owns the IP address 103.211.52.108?
103.211.52.108 is registered to Excitel IP Management. The address falls within the 103.211.52.0/22 network block. Registration is held at APNIC.
Where is 103.211.52.108 located?
Geolocation data places 103.211.52.108 in New Delhi, DL, India. The local time zone is Asia/Kolkata. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.211.52.108 malicious or safe?
103.211.52.108 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.