103.74.139.31📋 Copy

# IP Intelligence Briefing: 103.74.139.31/32

## Executive Summary

IP 103.74.139.31 is a low-risk infrastructure address belonging to Manager NOC (AS141549) within the RICTKA network block (103.74.136.0/22). The IP demonstrates minimal threat indicators with a risk score of 25 and shows no active malicious behavior, though it maintains presence on 1 of 8 DNSBL lists.

## Ownership and Geolocation

• Organization: Manager NOC (AS141549)
• Network: RICTKA (103.74.136.0/22)
• Geolocation: India (IN), Kerala, Kozhikode
• RIR: APNIC
• Abuse Contact: Available via RDAP

## Risk Assessment

## Network Classification

• Service Status: Firewalled / No Services
• Open Ports: None detected
• Infrastructure Type: Network Operations Infrastructure
• Cloud/Vpn/Proxy: Negative across all categories
• Network Role: Infrastructure (not provider, CDN, or hosting)

## Observed Behavior

• Open Services: None detected
• DNS Records: No PTR hostnames, no forward resolution
• TLS/HTTP: No certificates, no HTTP fingerprints
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## Network Neighborhood Analysis

• Subnet: 103.74.139.0/24
• Abuse Density: 0 (clean classification)
• Threat Siblings: 0
• Risk Distribution: High: 0, Medium: 0, Low: 0

## Observation History

16 observations recorded, most recent from 2026-07-28. The IP shows:

• Consistent ownership with no changes
• Geographic consistency (India)
• No threat persistence indicators
• No significant behavioral shifts over observation period

## Network Relationships

• Primary Entity: RICTKA (network classification)
• Same Network References: 2 instances identified
• Associated Campaigns: None detected

## Control Plane Analysis

• Origin ASN: 141549
• BGP Prefix: 103.74.139.0/24
• Route Stability: False (inconsistent routing)
• DNSSEC: Valid
• IRR Consistency: Not available

## Traceroute Analysis

• Hop Count: 29
• First Hop RTT: 0.2ms
• Last Hop RTT: 271.2ms
• Timed Out Hops: 15
• Transit Network: Comcast (US infrastructure)

## Threat Intelligence Narrative

IP 103.74.139.31 operates as managed network infrastructure within the Manager NOC organizational structure. The absence of open ports and services suggests this address functions as a firewalled infrastructure endpoint rather than an active service host. The single DNSBL listing warrants monitoring but does not indicate active malicious use. The routing path through Comcast infrastructure to reach an Indian IP address suggests the network may utilize peering or transit arrangements that route traffic through US backbone infrastructure.

Recommendations:

1. Monitor DNSBL Status: Track the 1 active blacklist listing for potential escalation

2. Route Stability: Investigate inconsistent routing behavior for potential BGP issues

3. Baseline Behavior: No immediate blocking required; maintain passive monitoring

4. Geolocation Validation: The 7,611km distance from probe location suggests the IP may be correctly geolocated to India despite validation challenges

Threat Level: LOW

Action: Monitor, no immediate intervention required

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.