103.225.124.22
103.225.124.22 is an IPv4 address operated by IRT-RAINBOWISP-IN (AS58898), geolocated to New York, India. Its reverse DNS name is rainbowisp.in. As of October 15, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.
Intelligence assessment of IP 103.225.124.22/32 identified the address as High Risk with a risk score of 70. The asset was registered to ASN 58898 (IRT-RAINBOWISP-IN, RAINBOWISP) via APNIC, with geolocation data conflicting between India (IN) and the United States. Threat classification indicated Campaign Infrastructure with a high likelihood and 10 correlated IPs.
Technical profiling showed port 22/TCP (SSH) running OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.7. The IP appeared on two DNS blacklists out of eight total lists. Activity was recorded between 2026-10-13 and 2026-10-15. Despite a Very Low overall confidence score (0.2575), the assessment recommended a Block action with critical severity based on the high risk score and strong threat evidence.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-RAINBOWISP-IN |
| ASN | AS58898 |
| Network Name | RAINBOWISP |
| CIDR Block | 103.225.124.0/22 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | rainbowisp.in |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | rainbowisp.in |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS58898 |
| Network Prefix | 103.225.124.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 2 |
| routing | 20% | 1 | 1 |
| services | 31% | 2 | 2 |
| ownership | 40% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 31% | 2 | 2 |
| Overall | 25% | 9 | 10 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-13 23:45:40 UTC |
| Last Seen | 2026-10-15 12:33:18 UTC |
| Profile Built | 2026-10-15 12:59:20 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.225.124.22
Who owns the IP address 103.225.124.22?
103.225.124.22 is registered to IRT-RAINBOWISP-IN. The address falls within the 103.225.124.0/22 network block. Registration is held at APNIC.
Where is 103.225.124.22 located?
Geolocation data places 103.225.124.22 in New York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.225.124.22 malicious or safe?
103.225.124.22 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 103.225.124.22?
The reverse DNS (PTR) record for 103.225.124.22 is rainbowisp.in. This hostname is not forward-confirmed, so it should be treated as a weak signal.
What ports are open on 103.225.124.22?
Responsive ports observed on 103.225.124.22 include 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.