103.71.76.242📋 Copy

# IP INTELLIGENCE BRIEFING: 103.71.76.242/32

Classification: Low Risk | Risk Score: 25/100 | Date: Current

## Executive Summary

IP address 103.71.76.242 presents a low-risk profile with no active threat indicators. The address is associated with APNIC-registered infrastructure (ASN 135692, RAGLOBAL) and shows minimal malicious activity patterns. No known campaigns, blacklists, or attack signatures detected.

## Infrastructure Profile

• ASN: 135692 | Organization: RAGLOBAL (manager admin)
• CIDR Block: 103.71.76.0/22
• RIR: APNIC (Asia-Pacific)
• Geolocation: US (New York, NY) / Signal inconsistency with India coordinates detected
• Network Classification: Firewalled / No Services Detected
• Open Ports: None | HTTP/TLS: Not available

## Threat Assessment

Current Status: Low Risk

• Risk Score: 25 (Low-Moderate)
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• DNSBL Listings: 1 of 8 total lists (1 high-severity listing)
• Blacklist Count: 0 active blacklists
• Campaign Matches: None detected
• Threat Feeds: Empty

## Behavioral Observations

• Service Status: No open ports, no active services
• DNS Resolution: No PTR records, no forward resolution
• Email Reputation: No email services configured
• Honeypot Hits: 0
• WAF Violations: 0
• Auto-Banned: No

## Network Neighborhood Analysis

• Subnet: 103.71.76.242/24
• Abuse Density: 0.0 (Low)
• Neighbor Risk Distribution: 0 High, 0 Medium, 10 Low
• Key Observations: All sibling IPs in /24 show risk scores of 0-25 with authority scores of 50. No high-risk neighbors detected.

## Signal History (12 Observations)

Recent activity indicates:

• Geolocation: Multi-signal inference pointing to India (20.59, 78.96) with 0.52 confidence
• Traceroute: 28 hops observed, partial target reachability
• DNSSEC: Valid signature confirmed
• Threat Persistence: 0 days observed
• Ownership Changes: 0 (stable registration)

## Related Entities

• Network Relationships: RAGLOBAL network (2 entries)
• Campaign Correlations: 0 correlated IPs
• Certificate Matches: None

## Recommended Actions

Monitoring: Standard monitoring recommended

Blocking: Not required

Investigation: No immediate action required. Profile indicates benign infrastructure.

## SOC Analyst Notes

The IP exhibits characteristics of a legitimate, low-activity address. DNSBL listing appears isolated with no supporting threat indicators. Neighborhood analysis confirms low-risk subnet environment. No escalation warranted unless new threat indicators emerge.

---

*Intelligence compiled from IPDebrief analysis platform. All data points verified through multi-source signal validation.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.