103.39.247.141📋 Copy

# INTELLIGENCE BRIEFING: 103.39.247.141

## EXECUTIVE SUMMARY

IP address 103.39.247.141 presents moderate risk (score: 55) with no active threat indicators. The IP belongs to infrastructure under IRT-WEBSTAR-IN (ASN: 133720), registered with APNIC in India (Maharashtra, Ulhasnagar). The address is currently firewalled with no active services. While the IP itself shows no malicious activity, it appears on 3 out of 8 DNSBLs, suggesting historical reputation concerns.

---

## NETWORK OWNERSHIP & CLASSIFICATION

Network Role: Infrastructure provider with firewalled configuration. No CDN, cloud, VPN, proxy, or hosting services detected. Not classified as bogon, mobile, residential, or Tor exit node.

---

## THREAT PROFILE

Risk Assessment: Moderate risk score (55/100) driven primarily by DNSBL presence rather than active malicious behavior. No evidence of persistence or campaign association.

---

## INFRASTRUCTURE ANALYSIS

DNS Resolution:

• PTR Hostname: 103.39.247.141.zessnetworks.com
• Forward Confirmation: Failed
• Hosted Domains: 0
• Email Authentication: SPF and DMARC configured

Services:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None

Control Plane:

• BGP Prefix: 103.39.247.0/24
• Origin ASN: 133720
• Route Stability: False (route changes detected)
• RPKI State: Not validated
• DNSSEC: Valid

---

## OBSERVATION HISTORY

17 signal observations recorded, most recent: 2026-07-27. Historical signals show consistent network ownership with no ownership changes. Geolocation signals validate the India/Maharashtra location assignment. No persistent malicious activity detected in the observation window.

---

## NEIGHBORHOOD ANALYSIS

Subnet: 103.39.247.0/24

• Abuse Density: 0% (clean)
• Active Siblings: 0
• Threat Siblings: 0
• Classification: Clean

The IP resides in a low-abuse subnet with no neighboring IPs flagged for malicious activity.

---

## RELATIONSHIP MAPPING

8 relationships identified:

• 3 Same Network associations (WEBSTAR)
• 5 DNS Association entries (103.39.247.141.zessnetworks.com)

No associations to external organizations, hostnames beyond the PTR record, or certificates.

---

## ACTIONS & RECOMMENDATIONS

Based on the moderate risk score and DNSBL presence:

1. Monitor: Track for service activation and DNSBL status changes

2. Block: Consider blocking at network perimeter if traffic patterns suggest abuse

3. Investigate: Review inbound traffic for potential reputation-based filtering issues

4. No Immediate Threat: No active malicious indicators requiring immediate containment

---

Analyst Note: This IP represents infrastructure-level presence with historical reputation concerns but no current active threat indicators. The moderate risk score warrants monitoring rather than immediate blocking actions.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.