103.47.16.143📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 103.47.16.143/32

Classification: Moderate Risk

Date: 2026-06-25

---

## Executive Summary

IP 103.47.16.143 is a residential broadband address assigned to home broadband services llp (ASN 133711) in Ghaziabad, Uttar Pradesh, India. The IP demonstrates a moderate risk score of 55/100 and shows historical blacklist activity. No active services or open ports were detected, indicating the address is likely firewalled or dormant.

---

## Technical Profile

• IP Address: 103.47.16.143
• ASN: 133711 (IRT-HBSGZB-IN)
• Organization: home broadband services llp
• Geolocation: Ghaziabad, Uttar Pradesh, India (IN)
• CIDR Block: 103.47.16.0/24
• Network Role: Firewalled / No Services
• DNS PTR: 103.47.16.143.hbsnetwork.net
• Risk Score: 55/100 (Moderate Risk)

---

## Threat Indicators

• DNSBL Listings: 3 of 8 lists (high severity)
• Abuse Confidence: Not quantified
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Campaign Likelihood: Not applicable

---

## Observation History

21 signals observed across multiple collection cycles. Key findings:

• 2026-06-25: Recent blacklist activity detected with 3 listings across multiple threat feeds
• 2026-06-14: Geographic signals confirmed Ghaziabad location via AlienVault OTX
• 2026-06-05: Operator score of 0.3478 (Basic) with multi-signal inference
• Threat Persistence: 0 days (not persistently malicious)
• Ownership Changes: 0 (stable ownership)

---

## Neighborhood Analysis

Subnet: 103.47.16.0/24

• Abuse Density: 1
• Classification: mostly_clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1
• Risk Distribution: No high/medium/low risk neighbors identified

---

## Relationships

• 56 relationship records identified
• Primary association: Same Network (HBSGZB)
• No shared hostnames, certificates, or organizational relationships detected

---

## Recommended Actions

Immediate

1. Increase logging verbosity for traffic from this IP address

2. Review recent activity in SIEM/SOC platforms for this IP

Firewall Rules

```bash

# iptables

iptables -A INPUT -s 103.47.16.143 -j DROP

# nftables

nft add rule inet filter input ip saddr 103.47.16.143 drop

# nginx

deny 103.47.16.143;

# pfSense

103.47.16.143/32

# Cloudflare WAF

Expression: ip.src eq 103.47.16.143 (Block)

# AWS WAF

Addresses: 103.47.16.143/32

```

Risk Assessment

The elevated risk score (55/100) combined with DNSBL listings suggests this IP warrants monitoring. However, the absence of open ports and firewalled status indicates limited active threat capability. Consider blocking at the perimeter if traffic patterns indicate abuse.

---

Status: Monitor / Block Recommendation

Confidence: Moderate

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.