103.253.24.124
IP INTELLIGENCE BRIEFING: 103.253.24.124/32
Target Overview
IP address 103.253.24.124 is registered to ASN 133210 (AXGN - Jacky) under network AXGNDOTCOMDOTSG-SG, allocated in the 103.253.24.0/22 CIDR block within the APNIC region. Geolocation data indicates Singapore (1.35°N, 103.82°E), with geo validation confirmed as plausible despite ICMP probe blockage.
Risk Assessment
Current risk profile shows a risk score of 0 with Low Risk reputation classification. No threat indicators detected across major threat feeds, zero blacklist matches, and no associations with known attacker infrastructure. The IP is not classified as a Tor exit node, proxy, VPN, or hosting service. Operator score rated as Minimal (0.1304).
Network Services & Exposed Attack Surface
The IP hosts a single service on TCP port 3389 (RDP), indicating remote desktop access exposure. DNS reverse resolution confirms hostname ip-253-24-124.indovirtue.com. Forward DNS resolution failed. Email authentication includes SPF record but lacks DMARC policy.
Relationship Analysis
Five relationships identified: two network associations (AXGNDOTCOMDOTSG-SG) and three DNS hostname associations. No certificate or organization-level relationships detected.
Neighborhood Intelligence
The /24 subnet (103.253.24.0/24) contains 2 sibling IPs with an abuse density of 0. Neighbor analysis shows one elevated-risk IP at 103.253.24.18 (risk score 66, authority 50) and one medium-risk IP at 103.253.24.113 (risk score 25, authority 50). This indicates the immediate neighborhood contains at least one IP with potential abuse activity.
Observation History
Sixteen signal observations recorded as of 2026-07-28. No threat observation count or persistent malicious activity detected. Route stability flagged as false, suggesting potential BGP prefix changes. Ownership has remained stable with zero changes recorded.
Recommended Actions
- Monitor 103.253.24.18 for coordinated abuse activity
- Evaluate RDP access policies for 103.253.24.124; consider restricting or blocking port 3389
- No immediate blocking recommended based on current risk profile
- Continue passive monitoring for changes in DNS or service configurations
Classification Summary
This IP presents a low-risk profile with standard single-service hosting characteristics. The primary concern is the exposed RDP service and the presence of an elevated-risk neighbor within the same /24 subnet. No immediate threat mitigation required; maintain passive observation and monitor for service configuration changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | AXGN - Jacky |
| ASN | AS133210 |
| Network Name | AXGNDOTCOMDOTSG-SG |
| CIDR Block | 103.253.24.0/22 |
| RIR | APNIC |
| Country | SG |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ip-253-24-124.indovirtue.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | ip-253-24-124.axgn.comip-253-24-124.indovirtue.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 3389 | rdp | tcp | — |
| Closed Ports | 22, 25, 80, 443, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS133210 |
| Network Prefix | 103.253.24.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-19 18:08:57 UTC |
| Last Seen | 2026-08-31 23:21:58 UTC |
| Profile Built | 2026-08-29 13:25:18 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.253.24.124
Who owns the IP address 103.253.24.124?
103.253.24.124 is registered to AXGN - Jacky. The address falls within the 103.253.24.0/22 network block. Registration is held at APNIC.
Where is 103.253.24.124 located?
Geolocation data places 103.253.24.124 in Singapore, SG, Singapore. The local time zone is Asia/Singapore. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.253.24.124 malicious or safe?
103.253.24.124 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 103.253.24.124?
The reverse DNS (PTR) record for 103.253.24.124 is ip-253-24-124.indovirtue.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.
What ports are open on 103.253.24.124?
Responsive ports observed on 103.253.24.124 include 3389. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.