103.59.203.71📋 Copy

IP INTELLIGENCE BRIEFING: 103.59.203.71

Executive Summary

The IP address 103.59.203.71 is classified as Low Risk with a risk score of 0. The address belongs to organization MANOJ AGARWAL (NET4USERVICES), ASN 134014, under APNIC registration in the Indian RIR region. Despite the Mumbai geolocation attribution, geolocation consensus remains unresolved.

Technical Profile

• Ownership: MANOJ AGARWAL, ASN 134014, NET4USERVICES (103.59.200.0/22)
• Geolocation: Mumbai, Maharashtra, IN (geo consensus unavailable)
• DNS: 71-203.59.103.n4uspl.net (n4uspl.net domain)
• Service State: Firewalled / No Services (no open ports detected)
• Email Reputation: SPF and DMARC records present for n4uspl.net

Threat Assessment

No active threat indicators were identified. The address shows:

• Zero abuse confidence score
• No blacklist listings
• No Tor exit node activity
• No known attacker or spam source indicators
• Zero threat observation count
• No persistent malicious behavior detected

Network Neighborhood Analysis

The /24 subnet (103.59.203.0/24) maintains an abuse density of 0 and is classified as clean. Five total siblings exist within the subnet, with two active. Three neighboring IPs (103.59.203.66, 103.59.203.67, 103.59.203.69) carry risk scores of 40, suggesting elevated activity in adjacent addresses despite the target IP's clean profile.

Historical Observation

Twenty-one signal observations were recorded. Recent activity includes traceroute paths through Comcast networks (New York, US). Ownership stability remains consistent with zero ownership changes detected. No threat persistence was observed across the observation window.

Control Plane Data

• BGP Origin: 103.59.203.0/24 (ASN 134014)
• Route Stability: False
• IRR Consistency: Match
• Route Changes (30-day): 0
• DNSSEC: Valid

Relationship Graph

Ten relationships were identified, primarily:

• Multiple "Same Network" links to NET4USERVICES
• DNS associations to 71-203.59.103.n4uspl.net

Recommended Actions

No firewall rules or blocking recommendations generated due to low-risk classification. Current posture: Allow with monitoring.

SOC Analyst Notes

This IP presents minimal threat risk. The clean neighborhood profile and absence of threat indicators support defensive monitoring rather than aggressive blocking. Continue observation if this address appears in security event logs, particularly in the context of the higher-risk sibling IPs in the same subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.