103.249.199.1
Intelligence analysis identified 103.249.199.1 as a low-risk web server (Score: 25) registered to IRT-SWITCHFIBER-PH (ASN 151650) in Rizal, Philippines. The endpoint opened standard HTTP and HTTPS ports (80/443) and returned a service banner identifying a Mini web server 1.0 ZTE corp 2005.
Observations recorded on 2026-09-27 showed no evidence of known campaigns, spam sources, or active attacker behavior. While the address was flagged as a "Suspicious Host" type, the neighborhood classification remained clean with zero threat siblings and zero abuse density. The IP was listed on one DNS blacklist out of eight total lists.
Analysts classified the threat level as low with a recommendation to monitor. Data confidence remained very low (0.125) due to limited historical coverage.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-SWITCHFIBER-PH |
| ASN | AS151650 |
| Network Name | SWITCHFIBER-PH |
| CIDR Block | 103.249.198.0/23 |
| RIR | APNIC |
| Country | PH |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Mini web server 1.0 ZTE corp 2005. |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-27 00:32:08 UTC |
| Last Seen | 2026-09-27 00:32:08 UTC |
| Profile Built | 2026-09-27 00:47:16 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.