103.244.176.238
# IP Intelligence Briefing: 103.244.176.238/32
## Executive Summary
IP 103.244.176.238 presents a Low Risk profile with a risk score of 25. The address is located in Karachi, Pakistan (ASN 95441), with no known association with active threat campaigns. No services are detected on the address, and it shows minimal operator-level activity. The IP has been listed on one of eight DNSBLs with a "high" severity rating.
## Network Classification & Routing
- ASN: 9541
- BGP Prefix: 103.244.176.0/24
- Country: Pakistan (PK)
- City: Karachi
- Routing Stability: Not route-stable; 0 route changes observed in 30 days
- Control Plane: Operator score 0.1304 (Minimal)
- DNSSEC: Valid
- RPKI State: Not assessed
## Threat Indicators
- Risk Score: 25 (Low Risk)
- Blacklist Count: 1 of 8 total DNSBL listings
- Known Campaigns: None detected
- Campaign Likelihood: Not applicable
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
## Network Activity & Services
- Open Ports: None detected
- HTTP/HTTPS Services: No services running
- DNS Records: No forward resolution; PTR records absent
- TLS Certificates: None present
- Connection Type: Not cloud, CDN, proxy, VPN, or hosting infrastructure
- Classification: Firewall / No Services
## Observation History
Eight observations recorded between July 21, 2026. Key signals include:
- Geolocation: Karachi, Sindh, Pakistan (confidence: 0.70)
- Blacklist Status: Listed on one blacklist with high severity (confidence: 0.85)
- DNSSEC: Valid with RRSIG absent (confidence: 0.90)
- Overall Data Confidence: 0.0833 (low)
## Neighborhood Analysis
Subnet 103.244.176.0/24:
- Total Siblings: 1 detected (103.244.176.75)
- Abuse Density: 0
- Risk Distribution: No high or medium risk neighbors
- Threat Siblings: 0
## Relationship Graph
No relationships detected with subnets, organizations, hostnames, or certificates.
## Recommended Actions
No specific firewall or WAF rules recommended due to low-risk profile. The IP does not meet threshold for immediate blocking.
## SOC Analyst Assessment
This IP demonstrates minimal malicious indicators. The single DNSBL listing with high severity warrants monitoring but does not indicate active threat activity. No services are exposed on the address, reducing attack surface. The subnet shows minimal abuse density with only one sibling IP present. No correlation to known campaigns or persistent malicious behavior was identified.
Classification: Low Risk — Monitor
Priority: Routine
Recommended Action: No immediate action required; include in standard monitoring if network traffic is observed from this address.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amjad Qasmi |
| ASN | AS9541 |
| Network Name | CYBERNET-PK |
| CIDR Block | 103.244.176.0/24 |
| RIR | APNIC |
| Country | PK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS9541 |
| Network Prefix | 103.244.176.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 2 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-23 13:10:43 UTC |
| Last Seen | 2026-10-05 05:09:24 UTC |
| Profile Built | 2026-08-29 02:55:35 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 30 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.244.176.238
Who owns the IP address 103.244.176.238?
103.244.176.238 is registered to Amjad Qasmi. The address falls within the 103.244.176.0/24 network block. Registration is held at APNIC.
Where is 103.244.176.238 located?
Geolocation data places 103.244.176.238 in Karachi, Sindh, Pakistan. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.244.176.238 malicious or safe?
103.244.176.238 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.