103.250.149.148
IP Intelligence Briefing: 103.250.149.148
Date: 2026-06-16
---
**1. Risk Profile**
- Risk Score: 80/100 (High Risk)
- Ownership: Registered to Rutul Shah (ASN 45916, APNIC).
- Geolocation: Mumbai, Maharashtra, India (latitude 19.9512, longitude 76.3877).
- Network Role: Web server (HTTPS, port 443) with TLS certificate issued by Gajshield Infotech Pvt. Ltd.
- Threat Indicators: No direct malicious activity detected (no abuse confidence score, no blacklisted domains).
---
**2. Observation History**
- Recent Activity:
- HTTP server fingerprint "GajWebServer" with status code 200.
- BGP subnet 103.250.149.0/24 classified as "mostly_clean" with 1 threat sibling.
- DNSSEC and CAA validation active; no DNSBL listings.
- Temporal Trends: No persistent malicious behavior; threat observation count: 1.
---
**3. Relationships & Neighborhood**
- Network Affiliation: Linked to GUJARATKUTCHNETWORK (repeated in relationships).
- Subnet Analysis:
- 103.250.149.148/24 has 1 active sibling IP; abuse density: 1 (low).
- No neighboring IPs detected (neighbors tool returned empty).
---
**4. Recommended Actions**
- Block/monitor: High-risk IP (score 80).
- Firewall Rules:
- iptables: `iptables -A INPUT -s 103.250.149.148 -j DROP`
- Cloudflare WAF: Block IP with rule `ip.src eq 103.250.149.148`
- AWS WAF: Add `103.250.149.148/32` to IP set.
- Monitoring: Increase logging verbosity for this IP; review recent TLS/HTTP activity.
---
Conclusion:
This IP is registered to a private entity in Mumbai, India, and operates a web server with no direct malicious indicators. However, its elevated risk score and network associations warrant monitoring and blocking to mitigate potential threats.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Rutul Shah |
| ASN | AS45916 |
| Network Name | — |
| CIDR Block | 103.250.149.0/24 |
| RIR | APNIC |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | GajWebServer |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2025-01-24T06:20:53+00:00 |
| Valid Until | 2027-01-24T06:20:53+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 730 days |
| Serial Number | 009BFDC183CD165D1D |
| Thumbprint | A6A52519C050EF155FE38E607D6A7C481A5246B8 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 5 |
| routing | 32% | 2 | 3 |
| services | 26% | 2 | 4 |
| ownership | 26% | 3 | 4 |
| reputation | 21% | 1 | 3 |
| geolocation | 21% | 2 | 2 |
| Overall | 27% | 12 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Fresh
| First Seen | 2026-05-07 23:03:26 UTC |
| Last Seen | 2026-06-26 18:10:15 UTC |
| Profile Built | 2026-06-27 03:29:34 UTC |
| Data Freshness | Fresh |
| Signal Types | 26 |
| Total Observations | 27 |
Full dossier details are available via our API.