103.1.187.190
# INTELLIGENCE BRIEFING: 103.1.187.190
Classification: LOW RISK | Analysis Date: 2026-07-18
---
## EXECUTIVE SUMMARY
IP address 103.1.187.190/32 presents as a low-risk infrastructure endpoint associated with IRT-MAMMOTHMEDIA-AU. No active threat indicators, blacklists, or malicious behavior observed. No security actions required at this time.
---
## PROFILE OVERVIEW
| Metric | Value |
|---|---|
| **Risk Score** | 0 (Low Risk) |
| **Provider Score** | 0 |
| **Authority Score** | 0 |
| **Operator Score** | 0.1304 (Minimal) |
| **Reputation** | Low Risk |
| **Abuse Confidence** | N/A |
| **Blacklist Count** | 0 |
Ownership Details:
- ASN: 133159
- Organization: IRT-MAMMOTHMEDIA-AU
- Network: MAMMOTHMEDIA-AU
- CIDR Block: 103.1.184.0/22
- RIR: APNIC
Geolocation:
- Primary: US, Illinois, Chicago
- Secondary: Australia, New South Wales, Sydney
- Consensus: False (geographic discrepancy detected)
- Timezone: America/Chicago
---
## NETWORK ROLE & SERVICES
| Attribute | Status |
|---|---|
| Open Ports | None |
| TLS Certificate | None |
| HTTP Title | None |
| Server Banner | None |
| Cloud Infrastructure | No |
| CDN | No |
| VPN/Proxy | No |
| Hosting Provider | No |
| Mobile/Residential | No |
| Bogon | No |
| Anycast | No |
Service Status: Firewalled / No Services Detected
---
## DNS & HOSTNAME ASSOCIATIONS
| Field | Value |
|---|---|
| PTR Hostnames | syd1-cont2.sqlwp.com |
| Forward Resolution | syd1-cont2.sqlwp.com |
| Domain | sqlwp.com |
| Forward Confirmed | No |
| Hosted Domain Count | 0 |
DNS Records:
- SPF: Not configured
- DMARC: Not configured
- TXT Records: 0
---
## THREAT INDICATORS
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Campaign Associations: None
- Threat Feeds: Empty
- Abuse Indicators: None
---
## CONTROL PLANE DATA
| Metric | Value |
|---|---|
| Origin ASN | 133159 |
| BGP Prefix | 103.1.184.0/22 |
| Route Changes (30d) | 0 |
| Route Stable | No |
| MOAS | No |
| DNSSEC Valid | Yes |
| CAA Records | No |
| DNSBL Listed | 0 |
| DNSBL Total Lists | 8 |
---
## OBSERVATION HISTORY (15 Observations)
Recent Signal Activity:
- 2026-07-18 14:17:25: Geo location: Sydney, NSW, Australia (Confidence: 70%)
- 2026-07-18 14:16:28: Organization: IRT-MAMMOTHMEDIA-AU (Confidence: 90%)
- 2026-07-18 14:16:10: Operator Score: Minimal (Confidence: 60%)
Temporal Analysis:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: No
---
## RELATIONSHIP GRAPH
| Type | Target |
|---|---|
| Same Network | MAMMOTHMEDIA-AU |
| DNS Association | syd1-cont2.sqlwp.com |
---
## NEIGHBORHOOD ANALYSIS
Subnet: 103.1.187.190/24
| Metric | Value |
|---|---|
| Neighbor Count | 0 |
| Abuse Density | 0 |
| High Risk Neighbors | 0 |
| Medium Risk Neighbors | 0 |
| Low Risk Neighbors | 0 |
| Threat Siblings | 0 |
Assessment: No neighboring IPs detected in /24 range. No inherited risk from adjacent addresses.
---
## SECURITY ACTIONS & RECOMMENDATIONS
Current Risk Score: 0
Recommended Actions: None required
Firewall Rules: N/A
Assessment: No blocking or filtering actions recommended based on current risk profile. IP shows legitimate infrastructure characteristics with no malicious activity indicators.
---
## CONCLUSION
IP 103.1.187.190 is classified as LOW RISK. The address belongs to IRT-MAMMOTHMEDIA-AU and appears to be legitimate infrastructure with no services exposed. Geographic discrepancies between US and AU data sources warrant monitoring but do not indicate malicious activity. No threat indicators, blacklist entries, or behavioral anomalies detected. SOC analysts may permit traffic to/from this address without additional restrictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-MAMMOTHMEDIA-AU |
| ASN | AS133159 |
| Network Name | MAMMOTHMEDIA-AU |
| CIDR Block | 103.1.184.0/22 |
| RIR | APNIC |
| Country | AU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | syd1-cont2.sqlwp.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | syd1-cont2.sqlwp.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
CN=webadmin, OU=Testing, O=docker, L=Virtual, S=NJ, C=US was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | None |
| Valid From | 2023-03-03T08:00:30+00:00 |
| Valid Until | 2024-03-02T08:00:30+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
🛡️ Public Network Snapshot
| Origin ASN | AS133159 |
| Network Prefix | 103.1.184.0/22 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 8% | 1 | 1 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 1 |
| geolocation | 12% | 2 | 2 |
| Overall | 10% | 8 | 9 |
| Data Coherence | Mixed Signals (60%) — 2 contradiction(s) |
| Attribution | Very Low (20%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: US, AU
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-10 02:36:12 UTC |
| Last Seen | 2026-08-31 09:19:15 UTC |
| Profile Built | 2026-08-31 09:23:39 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.1.187.190
Who owns the IP address 103.1.187.190?
103.1.187.190 is registered to IRT-MAMMOTHMEDIA-AU. The address falls within the 103.1.184.0/22 network block. Registration is held at APNIC.
Where is 103.1.187.190 located?
Geolocation data places 103.1.187.190 in Chicago, US-IL, United States. The local time zone is America/Chicago. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.1.187.190 malicious or safe?
103.1.187.190 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 103.1.187.190?
The reverse DNS (PTR) record for 103.1.187.190 is syd1-cont2.sqlwp.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.
What ports are open on 103.1.187.190?
Responsive ports observed on 103.1.187.190 include 80, 443, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.