103.66.98.30📋 Copy

# IP Intelligence Briefing: 103.66.98.30/32

Classification: Moderate Risk (Score: 40)

Status: Active but benign

Date: Current

---

## Executive Summary

IP 103.66.98.30 is assigned to IRT-BALAJIS-IN (ASN 58763) in Mumbai, Maharashtra, India. The address carries a moderate risk score of 40, primarily attributable to two DNSBL listings. No active threat indicators, open services, or malicious behavior were observed. The IP is currently firewalled with no accessible services.

---

## Technical Profile

Ownership & Registration:

• ASN: 58763 (IRT-BALAJIS-IN)
• Organization: BALAJIS
• Network Block: 103.66.96.0/22
• RIR: APNIC

Geolocation:

• Country: India (IN)
• Region: Maharashtra
• City: Mumbai
• Coordinates: 19.07°N, 72.89°E

Network Role & Services:

• Classification: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None
• PTR Records: None resolved

Control Plane:

• BGP Prefix: 103.66.98.0/24
• Route Stability: Stable
• DNSSEC: Valid
• DNSBL Listed: 2 of 8 total lists
• Operator Score: 0.1304 (Minimal)

---

## Threat Assessment

Current Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0 (active)
• Threat Feeds: None
• Known Campaigns: None

Risk Breakdown:

• Abuse Confidence: Not applicable
• Stability Label: None
• Threat Persistence: 0 days observed
• Persistently Malicious: No

---

## Neighborhood Analysis

Subnet: 103.66.98.0/24

• Total Siblings: 3
• Abuse Density: 0
• High Risk IPs: 0
• Medium Risk IPs: 0
• Low Risk IPs: 3

Neighbor Profiles:

The subnet exhibits clean security posture with no high or medium-risk neighbors.

---

## Relationship Graph

Detected Associations:

• 2 relationships identified (Same Network: BALAJIS)
• No external entity associations
• No certificate or hostname relationships

---

## Historical Observations

Observation Timeline: 12 observations recorded

Most Recent: 2026-07-30 11:12 UTC

Signal Evolution:

• Geolocation signals consistently resolve to India with confidence levels 0.50-0.85
• No ownership changes detected
• No threat persistence observed
• No significant risk escalation over time

---

## Recommendations

Action Required: None

Firewall Rules: Not applicable (no active services)

Monitoring Priority: Low

The IP presents minimal threat to defensive operations. The moderate risk classification is conservative, reflecting the IP's presence in a high-density hosting region and historical DNSBL associations. No immediate remediation required.

---

Analyst Notes: This IP should be monitored for any service activation or behavior changes. The subnet's low abuse density suggests the current risk profile is stable and unlikely to escalate.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.