103.87.125.106
Intelligence Briefing: IP 103.87.125.106
The IP address 103.87.125.106 was classified as a Low Risk endpoint with a risk score of 25. Ownership records linked the address to ASN 45489 (IRT-LKTELECOM-LK), while geolocation databases mapped the location to New York, US. Network analysis identified the infrastructure type as a residential endpoint with zero open ports detected during scanning.
Threat intelligence indicators showed the address was not flagged as a known attacker, spam source, or part of a known campaign, though the threat actor classification listed it as a Suspicious Host. The address appeared on one of eight DNSBLs with no incidents or honeypot hits recorded. Neighborhood analysis classified the /24 subnet as clean with zero threat siblings and an inherited risk of 0.
DNS hygiene was rated Fair, with SPF and DMARC records confirmed, but DNSSEC and CAA validation was absent. Due to the clean neighborhood classification and low severity profile, the recommendation was to monitor the endpoint with low firewall rule priority. The profile was last updated on 2026-09-14.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-LKTELECOM-LK |
| ASN | AS45489 |
| Network Name | LKTELECOM-LK |
| CIDR Block | 103.87.124.0/22 |
| RIR | APNIC |
| Country | LK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | v4g.dns.slt.lk |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | v4g.dns.slt.lk |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 20% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-04 16:00:59 UTC |
| Last Seen | 2026-09-14 10:50:56 UTC |
| Profile Built | 2026-09-14 10:58:38 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 29 |
Full dossier details are available via our API.