103.104.127.190📋 Copy

# INTELLIGENCE BRIEFING: 103.104.127.190/32

Classification: Low Risk | Date: July 24, 2026 | Source: IPDebrief Intelligence Platform

## Executive Summary

IP address 103.104.127.190 is classified as low risk with an overall risk score of 15. The endpoint is associated with NIO NETWORK (ASN 135225) within the Indian APNIC region. No active services were detected, and the IP shows minimal threat indicators. The subnet exhibits moderate abuse density with several high-risk neighbors requiring contextual awareness.

## Technical Profile

• Risk Score: 15 (Low Risk)
• Provider Score: 0 | Authority Score: 0 | Stability Score: 0
• ASN: 135225 (NIONETWORK-IN)
• Network Block: 103.104.124.0/22
• Geolocation: India (IN), Puducherry, 3rd cross
• Reputation: Low Risk
• Service Status: Firewalled / No Services Detected

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Vulnerability Scanner: No
• Blacklist Count: 1 (of 8 DNSBLs checked)
• Blacklist Severity: Medium
• Campaign Associations: None identified
• Abuse Confidence Score: Not applicable

## Network Context & Neighborhood Analysis

The target IP resides in subnet 103.104.127.0/24 with the following characteristics:

Notable Neighbor IPs:

• 103.104.127.16, .18, .49: Risk Score 80 (High Risk)
• 103.104.127.56, .134, .167, .185, .211, .219: Risk Score 55 (Medium Risk)
• 103.104.127.132: Risk Score 25 (Low Risk)

The subnet shows mixed risk distribution with 3 high-risk IPs (27%) and 7 medium-risk IPs (64%).

## Observations History

Thirteen observations recorded through July 24, 2026. Key temporal indicators:

• Abuse Density Trend: 0.0833 (low)
• DNSSEC Validation: Valid
• Route Stability: Unstable (isRouteStable: false)
• Threat Persistence: 0 days
• Is Persistently Malicious: No

Recent signals indicate consistent low-risk behavior with no escalating threat patterns.

## Network Relationships

Five relationships identified, all pointing to NIONETWORK-IN network entity. No external organizational links, certificates, or hostname associations detected.

## Recommended Actions

No specific firewall recommendations generated. Risk profile indicates minimal immediate threat requiring blocking. Standard network security policies apply.

## SOC Analyst Notes

• Priority: Low
• Action Required: Monitor only; no immediate mitigation needed
• Context: IP is relatively clean within a subnet showing elevated neighbor risk. Contextual awareness recommended for traffic from adjacent IPs (16, 18, 49 in /24).
• False Positive Risk: Minimal—IP shows no active services and low risk indicators

---

*Report generated from IPDebrief intelligence data. All findings based on observed signals and network reconnaissance.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.