# IP Intelligence Briefing: 103.251.52.162/32
## Executive Summary
IP address 103.251.52.162/32 is classified as Low Risk with an overall risk score of 25. The address belongs to Onebroadband (IRT-IN-IMCL, ASN 17665) and is geolocated to New Delhi, India. Current profile indicates the IP is firewalled with no active services, no threat indicators, and a clean neighborhood classification.
---
## Current Profile Assessment
Risk Indicators:
- Risk Score: 25 (Low Risk)
- Reputation: Low Risk
- Abuse Confidence Score: Null
- Blacklist Count: 0
- Known Campaigns: 0
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
Network Classification:
- ASN: 17665 (IRT-IN-IMCL)
- Organization: Onebroadband
- Netname: Onebroadband
- CIDR Block: 103.251.52.0/22
- Infrastructure Type: Firewalled / No Services
- Not classified as: Cloud, CDN, VPN, Proxy, Tor, Hosting, Mobile, or Residential
Geolocation:
- Country: India (IN)
- Region: National Capital Territory of Delhi
- City: New Delhi
- Accuracy Radius: 1500 km
- GeoConsensus: True
DNS Analysis:
- PTR Hostnames: None
- Forward Resolution: Not confirmed
- Hosted Domains: 0
- Email Authentication: No SPF, DMARC, or TXT records
- Domain: None
Service Detection:
- Open Ports: None detected
- TLS Certificate: None
- HTTP Title/Server Banner: None
- Total Incidents: 0
---
## Neighborhood Analysis (103.251.52.0/24)
Subnet Health:
- Classification: Clean
- Abuse Density: 0
- Inherited Risk: 0
- Total Siblings: 3
- Active Siblings: 1
- Threat Siblings: 0
Sibling IPs:
- 103.251.52.80: Risk Score 30, Authority Score 50
- 103.251.52.81: Risk Score N/A, Authority Score N/A
The /24 subnet shows minimal activity with only one active sibling IP. The target IP shares the network segment with one other actively probed neighbor showing slightly elevated risk (30).
---
## Relationship Graph
All four relationship entries point to the "Onebroadband" network entity. No host-level relationships, certificates, or specific organizational links were identified beyond the network-level affiliation.
---
## Signal History (15 Observations)
Most Recent Signals (2026-07-29):
- Port scanning activity detected
- Subnet analysis: Clean classification
- Network role: Not cloud, CDN, VPN, proxy, Tor, or hosting
- Ownership persistence: No changes
- Geolocation inference: New Delhi, India (confidence 0.52)
Temporal Indicators:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: False
The IP shows no escalation in risk signals over the observation period. Signals remain consistent with a dormant, firewalled endpoint.
---
## Control Plane & BGP Data
- Origin ASN: 17665
- BGP Prefix: 103.251.52.0/24
- Route Stable: False
- RPKI State: Null
- DNSSEC Valid: True
- DNSBL Listed Count: 1
- DNSBL Total Lists: 8
- Route Changes (30d): 0
---
## Recommended Actions
No specific security actions or firewall rules were generated for this IP address. The low-risk profile and absence of active threat indicators suggest this address does not require immediate mitigation measures.
Suggested Monitoring:
- No immediate action required
- Continue routine monitoring given the network's classification
- Monitor sibling IP 103.251.52.80 if elevated risk thresholds are reached
---
## Intelligence Conclusion
IP 103.251.52.162 represents a low-risk, firewalled endpoint within the Onebroadband India network infrastructure. No malicious activity, threat indicators, or service anomalies were detected. The address maintains a clean profile with no blacklist associations and zero threat observations. Recommended treatment: Allow with standard monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | IRT-IN-IMCL |
| ASN | AS17665 |
| Network Name | Onebroadband |
| CIDR Block | 103.251.52.0/22 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-24 08:17:42 UTC |
| Last Seen | 2026-07-29 21:54:09 UTC |
| Profile Built | 2026-07-29 22:09:07 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 17 |
Full dossier details are available via our API.