103.71.76.252📋 Copy

# INTELLIGENCE BRIEFING: 103.71.76.252/32

Date: 2026-07-27

Classification: Routine Threat Intelligence

Risk Assessment: LOW (Score: 25/100)

---

## EXECUTIVE SUMMARY

IP 103.71.76.252 is a low-risk address with no active threat indicators. The address shows minimal network activity, no open services, and limited geolocation data. Historical analysis indicates occasional blacklist presence but no persistent malicious behavior. The subnet 103.71.76.0/24 demonstrates low abuse density with 4 of 10 sibling IPs classified as low-risk.

---

## NETWORK PROFILE

Risk Metrics:

• Overall Risk Score: 25/100
• Reputation Classification: Low Risk
• Provider Score: 0/100
• Authority Score: 0/100
• Stability Score: 0/100

Infrastructure Classification:

• Network Role: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None

Geolocation Data:

• Country Code: IN (India)
• Region: Uttar Pradesh
• City: Pur (partial data)
• Coordinates: 28.7818°N, 77.2285°E
• Geo-Validation Confidence: Low (0.35)
• Accuracy Radius: 1500km

---

## CONTROL PLANE ANALYSIS

Autonomous System:

• Origin ASN: 135692
• BGP Prefix: 103.71.76.0/24
• Route Stability: False
• Route Changes (30d): 0
• Is MOAS: False
• RPKI State: Not verified
• IRR Consistency: Not verified

DNS Security:

• DNSSEC Valid: True
• DNSBL Listed: 1/8 total lists
• DNSBL Severity: High
• PTR Hostnames: None
• Forward Resolution: Not confirmed

---

## THREAT INDICATORS

Malicious Activity Assessment:

• Is Tor Exit Node: No
• Is Known Attacker: No
• Is Spam Source: No
• Is Proxy: No
• Is VPN: No
• Is Hosting Provider: No
• Is Mobile: No
• Is Residential: No

Behavioral Signals:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Is Persistently Malicious: No
• Auto-Banned: No
• Is Active Attacker: No

Threat Campaign Correlation:

• Campaign Likelihood: None identified
• Certificate Matches: 0
• Correlated IPs: 0
• Known Campaigns: None

---

## OBSERVATION HISTORY

Data Collection Period: 8 observations

Most Recent Signal: 2026-07-27T06:14:04 UTC

Signal Timeline:

1. Geolocation (0.35 confidence): India, latitude 20.59, longitude 78.96

2. Geolocation (0.70 confidence): India, Uttar Pradesh, Pur city

3. DNSSEC Score: Minimal (0.15 raw score)

4. Overall Profile: Low data sufficiency (0.5)

5. Blacklist Activity: 8 total lists, 1 listing with high severity

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Is Persistently Malicious: No

---

## SUBNET NEIGHBORHOOD ANALYSIS

Subnet: 103.71.76.0/24

Total Siblings: 10

Abuse Density: 0 (Low)

Risk Classification: Low

Neighbor Risk Distribution:

• High Risk: 0 IPs
• Medium Risk: 0 IPs
• Low Risk: 4 IPs

Notable Neighbors:

---

## RELATIONSHIP GRAPH

Connected Entities: None identified

Related Hostnames: 0

Related Organizations: 0

Related Certificates: 0

Related Subnets: 0

---

## SECURITY ACTIONS RECOMMENDATION

Current Risk Level: LOW (25/100)

Action Required: No immediate action recommended

Firewall Rules: None generated due to low risk profile

Monitoring Recommendations:

• Standard logging maintained
• No special blocking or rate-limiting required
• Continue passive monitoring for service activation

---

## ANALYST ASSESSMENT

IP 103.71.76.252 presents a low-threat profile with minimal network activity. The address shows:

• No open services or ports
• No threat indicators or malicious behavior
• Minimal blacklist presence (1/8 lists)
• Stable but unverified routing

The subnet context (103.71.76.0/24) supports a benign assessment with low abuse density and no high-risk neighbors. No intelligence correlates this IP to active campaigns or coordinated attacks.

Recommendation: Maintain standard monitoring. No escalation required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.