123.200.15.208📋 Copy

# IP Intelligence Briefing: 123.200.15.208/32

Date: 2026-06-22

Classification: Low Risk

Risk Score: 25/100

## Executive Summary

IP address 123.200.15.208 belongs to Link3 Technologies Ltd (ASN 23688) and is classified as a low-risk single-service host. The IP exhibits minimal threat indicators but shows one DNSBL listing and route instability. No active malicious campaigns or persistent malicious behavior detected.

## Network Profile

• Organization: Link3 Technologies Ltd (BD)
• ASN: 23688 (LINK3-TECH-AS-BD-AP)
• Geolocation: London, GB (profile) / Bangladesh, BD (ASN registry) — geoConsensus: false
• CIDR Block: 123.200.0.0/19
• Registration Date: 2007-01-11 (APNIC RIR)
• Network Role: Single-Service Host

## Threat Indicators

• Risk Score: 25 (Low)
• Abuse Confidence Score: Not available
• DNSBL Status: Listed on 1 of 8 total blacklists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: None detected
• Known Campaigns: None

## Network Services

• Open Ports: 22/TCP (SSH)
• DNS PTR Hostname: 15.208.aries.link3.net
• Forward Resolution: 15.208.aries.link3.net
• Email Auth: SPF and DMARC records present
• TLS Certificate: None observed

## Control Plane Analysis

• Route Stability: Unstable
• RPKI State: Not validated
• IRR Consistency: Not verified
• Route Changes (30d): 0
• BGP Prefix: 123.200.0.0/19
• Operator Score: 0.1304 (Minimal)

## Observation History (22 Signals)

Recent observations indicate:

• Subnet classification: "mostly_clean"
• Abuse density: 1 (neighborhood)
• Threat persistence: 0 days
• No persistent malicious activity
• ASN data consistently shows 123.200.15.0/24 prefix

## Network Relationships

• Related Entities: 41 relationships total
• Same Network: Multiple links to Link3-Technologies-Ltd
• Subnet Classification: mostly_clean

## Neighborhood Analysis (123.200.15.0/24)

• Abuse Density: 0–1 (varies by signal)
• Inherited Risk: 2
• Active Siblings: 1
• Threat Siblings: 1

## Recommended Actions

Based on the low-risk profile and single DNSBL listing, the following actions are recommended for SOC teams:

1. Monitor Route Stability: The BGP route is marked as unstable; continue monitoring for route changes.

2. DNSBL Review: Investigate the single DNSBL listing to determine if it requires action.

3. SSH Exposure: The open SSH port (22) is typical for infrastructure hosts; ensure no unauthorized access attempts.

4. Geolocation Verification: Address the discrepancy between GB profile data and BD ASN registry.

5. Continue Passive Monitoring: No immediate blocking required; maintain observation.

## Conclusion

IP 123.200.15.208 is a low-risk infrastructure asset belonging to Link3 Technologies Ltd. The IP shows minimal threat indicators with one DNSBL listing and route instability as primary concerns. No evidence of malicious activity or persistent threats detected. Standard monitoring and passive observation are recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.