IP Intelligence Briefing: 103.66.215.126
*Generated via IPDebrief Threat Intelligence Platform*
---
**Key Risk Indicators**
- Risk Score: 50 (Moderate Risk)
- Threat Observations: No direct malicious indicators (no malware, phishing, or C2 activity detected).
- Network Stability: Firewalled infrastructure with no open ports or services exposed.
- Geolocation: Registered to MANAGER NOC (India), with DNSSEC validation but no precise city/region data.
- Subnet Abuse: Subnet 103.66.215.0/24 has 0 active malicious neighbors and low abuse density.
---
**Ownership & Network Context**
- ISP: MANAGER NOC (ASN 134022)
- Registration: APNIC, India
- Network Role: Residential/enterprise network with no CDN, cloud, or mobile carrier flags.
- BGP: Route stable with no recent changes; DNSSEC validated.
---
**Threat Observations Over Time**
- Historical Data: 16 observations (last 30 days) include DNSSEC validation, geolocation, and network prefix tracking.
- No Persistent Threats: No repeated malicious activity or long-term persistence detected.
---
**Relationships & Neighbors**
- Network Relationships: Linked to JOISTER-TRINITY (same subnet).
- Neighbor Analysis: Subnet 103.66.215.0/24 has no active malicious IPs; 0 threat siblings.
---
**Recommended Actions**
- Firewall Rules:
- iptables: `iptables -A INPUT -s 103.66.215.126 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 103.66.215.126 drop`
- Cloudflare WAF: Block IP with rule `{\"action\":\"block\",\"filter\":{\"expression\":\"ip.src eq 103.66.215.126\"}}`
- Monitoring: Track for unexpected service exposure or network changes due to moderate risk profile.
---
**Conclusion**
The IP exhibits a moderate risk with no direct malicious activity detected. It is part of a low-abuse subnet managed by a local ISP in India. While no immediate threats are present, the moderate risk score suggests monitoring for potential lateral movement or network compromise. Implement firewall blocking rules as a precautionary measure.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | MANAGER NOC |
| ASN | AS134022 |
| Network Name | โ |
| CIDR Block | 103.66.215.0/24 |
| RIR | APNIC |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.29.6 |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_8.7 |
๐ TLS Certificate
| SANs | admin.cablenetco.in |
| Valid From | 2026-05-14T20:13:20+00:00 |
| Valid Until | 2026-08-12T20:13:19+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 06B91C22B32FF70B06B87A823AD6A13D3D70 |
| Thumbprint | 2FA06AF48191167E4B45287845479D401D92C996 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 27% | 2 | 3 |
| services | 24% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 24% | 11 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-11 08:57:13 UTC |
| Last Seen | 2026-06-26 07:44:05 UTC |
| Profile Built | 2026-06-26 07:53:20 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.