103.30.82.66📋 Copy

# IP Intelligence Briefing: 103.30.82.66/32

## Executive Summary

IP address 103.30.82.66 is classified as Moderate Risk (risk score: 40) with ownership attributed to IRT-APNANET4-IN (ASN 133661) in Jalandhar, Punjab, India. The IP exhibits firewalled/no-service characteristics with no active open ports, but operates within a subnet showing elevated abuse density (0.6). Neighborhood analysis reveals 3 of 5 active siblings are flagged as threats.

## Ownership and Infrastructure

• ASN: 133661
• Organization: IRT-APNANET4-IN
• Country: India (IN)
• City: Jalandhar, Punjab
• BGP Prefix: 103.30.80.0/22
• Routing Status: Stable (routeChanges30d: 0)
• DNSSEC: Valid
• Service Profile: Firewalled / No Services (no open ports detected)

## Threat Assessment

The IP shows the following threat indicators:

• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• DNSBL Listings: 2 out of 8 total lists
• Threat Observation Count: 1
• Persistence: Not persistently malicious (threatPersistenceDays: 0)

## Neighborhood Analysis (103.30.82.0/24)

The subnet exhibits moderate abuse density (0.6) with the following characteristics:

• Total Siblings: 5
• Active Siblings: 3
• Threat Siblings: 3
• Classification: Mostly clean
• Inherited Risk: 7

Notable Neighbor IPs:

## Observation History

Eighteen signal observations recorded, with the most recent activity on 2026-06-17. Observed signals include:

• Subnet abuse density assessment (0.6)
• Geolocation inference (IN, confidence 0.52)
• Operator score assessment (0.2609)
• Threat list verification (clear)
• Ownership stability verification

## Network Role Classification

The IP is classified as:

• Not a provider, CDN, VPN, proxy, or Tor
• Not cloud-based or hosting infrastructure
• Not mobile carrier or residential
• Not bogon or anycast

## Recommended Actions

Based on the moderate risk profile and neighborhood context:

1. Monitor: Track traffic patterns to this IP and its siblings

2. Block: Consider blocking if traffic patterns indicate abuse

3. Investigate: Monitor associated siblings (103.30.82.29, 103.30.82.70) which show elevated risk scores (55)

4. Allow: No immediate block required based on current profile, but maintain monitoring

## Conclusion

103.30.82.66 is a firewalled IP in a moderately risky subnet with no active services. While the IP itself shows no direct threat indicators, the neighborhood context warrants continued monitoring. The subnet's 0.6 abuse density and 3 flagged threat siblings suggest potential for coordinated activity. Recommend baseline monitoring with escalation if traffic patterns change.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.