103.5.108.126📋 Copy

IP Intelligence Briefing: 103.5.108.126

Date: 2026-06-17

---

**1. Core Profile**

• Risk Score: 55 (Moderate Risk)
• Ownership: Engage Technology Limited (AS141226), registered in New Zealand.
• Geolocation: Havelock North, Hawke’s Bay Region, NZ.
• Network Role: Web server (HTTP/HTTPS ports open).
• TLS Certificate: Issued to Ubiquiti Networks Inc. (San Jose, CA, US).

---

**2. Threat Indicators**

• No direct malicious activity: No indicators of spam, attacker, or Tor exit node.
• DNSSEC Valid: BGP routing shows valid DNSSEC, but geo-validation flags anomalies (RTT inconsistency with distance).
• Subnet Risk: Subnet 103.5.108.0/24 has 75% abuse density, with 3/4 sibling IPs showing risk.

---

**3. Observation History**

• Recent Activity (June 2026):

- TLS certificate observed (valid, no self-signed).

- HTTP server banner: `lighttpd/1.4.54`.

- No persistent threats or ownership changes detected.

---

**4. Relationships & Network**

• Linked Entities:

- Same network as ETL-NZ (likely Engage Technology Limited).

- No direct associations with known malicious campaigns or domains.

• Neighbors:

- 103.5.108.11, 103.5.108.45, 103.5.108.202 (similar risk scores, low abuse density).

---

**5. Recommended Actions**

• Monitor Subnet: The subnet has elevated abuse density; investigate neighbors for potential compromise.
• Verify Geolocation: Geo-validation anomalies suggest possible spoofing; validate server location.
• Secure TLS: Ensure certificate validity and restrict access to known, trusted domains.
• Network Segmentation: Isolate critical services to limit lateral movement if compromised.

---

Source: IPDebrief | Confidence: Moderate | Last Updated: 2026-06-17

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.