103.85.113.108📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 103.85.113.108/32

Classification: Low Risk Infrastructure Host

Date: Current Assessment

---

## EXECUTIVE SUMMARY

IP 103.85.113.108 is a low-risk infrastructure server (Risk Score: 25) located in Finland, operated under the FirstServer-VS network block (ASN 200740). The IP exhibits minimal threat indicators with no known malicious campaigns, blacklist associations, or persistent malicious activity observed.

---

## NETWORK PROFILE

---

## THREAT ASSESSMENT

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence: Not flagged
• Known Attacker: False
• Spam Source: False
• Blacklist Count: 0
• Campaign Likelihood: None
• Persistently Malicious: False

Threat Indicators:

• No threat feeds associated
• No known campaigns correlated
• No active threat indicators detected
• DNSBL Listed: 1 of 8 total lists (minimal impact)

---

## NETWORK SERVICES

TLS/HTTP: No certificates, no HTTP title, no TLS sessions observed.

---

## DNS ANALYSIS

• PTR Hostname: vm4496351.firstbyte.club
• Forward Resolution: vm4496351.firstbyte.club
• Domain: firstbyte.club
• DNSSEC: Valid
• Email Authentication: SPF/DMARC not configured
• Forward Resolution Count: 1

---

## GEOLOCATION VALIDATION

• Country: Finland (FI)
• Coordinates: 61.92°N, 25.75°E (inferred)
• Distance from Prober: 5,125.7 km
• Validation Status: ICMP blocked - unable to validate
• Geo Plausible: True

---

## RELATIONSHIP ANALYSIS

• Network Relationships: Multiple associations with FirstServer-VS subnet
• DNS Associations: vm4496351.firstbyte.club (primary hostname)
• Related Entities: No organizations or certificates beyond network/host associations

---

## NEIGHBORHOOD ANALYSIS

Subnet: 103.85.113.0/24

• Abuse Density: 0 (Minimal)
• Total Siblings: 1
• Threat Siblings: 0
• Neighbor IP: 103.85.113.149 (Risk Score: 25, Authority Score: 60)

---

## OBSERVATION HISTORY

Total Observations: 18

• Most Recent: 2026-07-29T01:42:50 UTC
• Ownership Changes: 0
• Threat Observation Count: 0
• Threat Persistence Days: 0

Signal Types Observed:

• Geolocation inference (confidence: 0.28)
• Network scanning (confidence: 0.90)
• Ownership stability (confidence: 0.85)
• ICMP validation attempts (blocked)

---

## SECURITY ACTIONS & RECOMMENDATIONS

Current Risk Posture: Low Risk

• No immediate firewall or blocking actions required
• No specific WAF rules recommended
• No iptables/nftables rules generated

Monitoring Recommendations:

• Continue passive observation for threat signal emergence
• Monitor for DNSBL additions
• Watch for service changes on port 22
• Correlate with any emerging threat intelligence on firstbyte.club domain

---

## ASSESSMENT CONCLUSION

IP 103.85.113.108 presents a low-risk infrastructure profile consistent with a single-service virtual server host. The IP demonstrates stable ownership, minimal neighborhood abuse density, and no active threat indicators. SOC teams may treat as benign unless new threat signals emerge. No immediate blocking or filtering actions recommended.

---

*Intelligence generated from IPDebrief platform data. Classification: Defensive Security Analysis.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.