103.79.178.210📋 Copy

# IP Intelligence Briefing: 103.79.178.210/32

Classification: High Risk

Date of Analysis: 2026-07-22

Risk Score: 70/100

---

## Executive Summary

The IP address 103.79.178.210 presents a high-risk classification (score: 70) despite showing minimal active threat behavior. The address is assigned to IRT-FZ-BD (FZ-BD) within APNIC's Bangladesh region (ASN 141765). While currently firewalled with no open services, the IP appears listed on 4 of 8 DNSBLs, suggesting historical reputation issues.

---

## Technical Profile

Network Ownership:

• ASN: 141765 (IRT-FZ-BD)
• CIDR Block: 103.79.178.0/24
• Country: Bangladesh (BD)
• RIR: APNIC
• Status: Route stable: false

Service State:

• Open Ports: None detected
• TLS/HTTP: No active services
• Classification: Firewalled / No Services

DNS Configuration:

• PTR Resolution: None
• Forward Resolution: Not configured
• Hosted Domains: None
• Email Authentication: SPF/DMARC not configured

Control Plane:

• DNSSEC Valid: Yes
• DNSBL Listings: 4 of 8 total lists
• Operator Score: 0.1304 (Minimal)

---

## Threat Indicators

Current State:

• Threat Feed Matches: None
• Known Campaigns: None detected
• Active Attacker Status: False
• Behavioral Flags: No honeypot hits, no enumeration strikes, no WAF violations

Reputation Signals:

• Blacklist Count: 0 (current)
• DNSBL Listed: 4 out of 8 lists
• Abuse Confidence Score: Unavailable
• Is Tor Exit/Proxy/VPN: No

---

## Neighborhood Analysis

Subnet Risk Profile:

• Subnet: 103.79.178.0/24
• Abuse Density: 0
• Neighbor Count: 1 active sibling
• Risk Distribution: Low (1), Medium (0), High (0)

Sibling IP:

• 103.79.178.6: Risk Score 25/100, Authority Score 50

The /24 subnet demonstrates low abuse density, suggesting this IP's high risk score may be isolated rather than indicative of broader subnet compromise.

---

## Observation History

Historical Signals: 11 observations recorded

• Most Recent: 2026-07-22 04:08:09 UTC
• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No

Observations confirm stable network registration with IRT-FZ-BD organization. No evidence of ownership manipulation or persistent malicious activity.

---

## SOC Recommendations

Immediate Actions:

1. Monitor for Service Activation: Currently firewalled with no open ports. Monitor for service enumeration or port scanning activity.

2. DNSBL Review: Investigate which 4 DNSBLs list this IP to understand historical reputation context.

3. Subnet Context: Low neighborhood abuse density suggests contained risk. Consider subnet-level policy if broader activity emerges.

Firewall Rules:

• Allow/Deny pending service activity observation
• No immediate blocking recommended absent active threat indicators
• Monitor for DNS traffic to resolve any hosted domains

Investigation Priority: Medium

• High risk score warrants monitoring but lacks active threat indicators
• Historical DNSBL listings suggest past issues may have resolved
• Network classification and geolocation are stable

Correlated Entities:

• Network: FZ-BD (IRT-FZ-BD)
• ASN: 141765
• Regional: Bangladesh (APNIC)

---

Analyst Notes: The high risk score (70) contrasts with minimal behavioral activity and no current threat indicators. This pattern suggests either historical reputation decay, classification artifacts, or latent threat potential. Recommend continuous monitoring for service activation or DNS activity changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.