103.86.108.224📋 Copy

# IP Intelligence Briefing: 103.86.108.224/32

Date: 2026-07-17

Classification: Low Risk

Risk Score: 25/100

---

## Executive Summary

IP 103.86.108.224 presents as a low-risk endpoint associated with IRT-EXPERT-BD, a Bangladesh-based organization operating under ASN 136395. The IP exhibits minimal threat indicators, no active services, and low neighborhood abuse density. No immediate blocking actions are recommended based on current threat intelligence.

---

## Ownership and Network Profile

• Organization: IRT-EXPERT-BD (IRT-EXPERT-BD)
• Netname: EXPERT-BD
• ASN: 136395 (APNIC RIR)
• CIDR Block: 103.86.108.0/24
• Abuse Contact: Available via RDAP
• Registration: APNIC allocation

---

## Geolocation Analysis

Conflicting geolocation signals detected:

• Primary Signal: GB (London) - 2 geographic sources
• Secondary Signal: BD (Dhaka region) - 23.7018°N, 90.3742°E
• Geo Consensus: False
• Geo Plausible: False

The IP appears to be hosted through infrastructure with multiple geographic representations, though the authoritative ownership data confirms Bangladesh-based registration.

---

## Threat Indicators Assessment

Current Threat Status: Clean

• Blacklist Count: 0
• DNSBL Lists: 1 of 8 total lists
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None identified

No active threat indicators or malicious behavior observed in the profile.

---

## Network Behavior and Services

• Service Status: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: No forward resolution
• PTR Hostnames: None
• HTTP/TLS: No services detected
• Email Auth: No SPF/DMARC records

The IP appears to be a passive endpoint with no active network services.

---

## Neighborhood Analysis

Subnet: 103.86.108.0/24

• Abuse Density: 0.3333 (Low/Moderate)
• Subnet Classification: mostly_clean
• Total Siblings: 3
• Active Siblings: 0
• Threat Siblings: 1

Neighbor Risk Distribution:

One neighboring IP (103.86.108.91) shows elevated risk scoring at 40.

---

## Historical Observations

Total Observations: 15 signals

Latest Observation: 2026-07-17

Key historical signals include:

• Ownership registration data (IRT-EXPERT-BD, APNIC)
• Geolocation updates (BD, London GB)
• Network classification stability
• No ownership changes detected
• No persistent malicious behavior observed

The IP maintains a stable profile with no escalating threat patterns.

---

## Control Plane Analysis

• Route Stability: False
• DNSSEC: Valid
• RPKI State: Not available
• IRR Consistency: Not available
• Route Changes (30d): 0
• MOAS: No
• Delegation Age: Not available

BGP routing shows some instability but no recent route modifications.

---

## Recommended Actions

Current Risk Level: 25/100 (Low)

No immediate firewall rules or blocking actions recommended.

The IP presents minimal threat. However, SOC analysts should:

1. Monitor the subnet 103.86.108.0/24 for activity from neighbor 103.86.108.91 (risk score: 40)

2. Verify geolocation consistency with Bangladesh-based operations

3. No current evidence suggests malicious activity

---

## Intelligence Narrative

IP 103.86.108.224 is a low-risk endpoint registered to IRT-EXPERT-BD under ASN 136395. The IP operates without active services and shows no threat indicators. Geolocation data indicates Bangladesh-based ownership with conflicting London signals, suggesting potential hosting infrastructure misconfiguration or multi-region operations. The subnet maintains low abuse density with one neighboring IP requiring monitoring. Historical data confirms stable, non-malicious behavior over the observation period. No immediate defensive actions are warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.