103.168.3.225📋 Copy

# IP Intelligence Briefing: 103.168.3.225/32

Classification: LOW RISK — No Immediate Threat Indicators

Date of Analysis: 2026-07-29

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

The IP address 103.168.3.225 presents a low-risk profile with a risk score of 25. The address belongs to RAVI GREWAL (ASN 135761), operating under the FOCUS network block (103.168.2.0/23) registered with APNIC. Geolocation data places the IP in Bahadurgarh, Haryana, India. No malicious indicators, threat campaigns, or abuse signals were observed during analysis.

---

## Technical Profile

Network Classification:

• ASN: 135761
• Organization: RAVI GREWAL / FOCUS
• CIDR Block: 103.168.2.0/23
• Geolocation: IN (Haryana, Bahadurgarh)
• Service Purpose: Firewalled / No Services

DNS Configuration:

• PTR Hostname: static-103-168-3-225.unpl.net
• Forward Resolution: Confirmed (1 hostname)
• No hosted domains, no email authentication records (SPF/DMARC absent)

Service Scan:

• No open ports detected
• No TLS certificates or HTTP services identified
• Connection type: Inactive/Blocked

---

## Threat Assessment

Risk Score: 25 (Low)

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0

Threat Indicators:

• No blacklist entries detected
• No known attacker, spam source, or Tor exit node behavior
• No associated threat campaigns
• Abuse confidence score: Not applicable
• DNSBL listing count: 1 (isolated entry)

Behavioral Analysis:

• Not persistently malicious (threatPersistenceDays: 0)
• No threat observation count recorded
• Ownership changes: None detected

---

## Observation History

The IP generated 16 total observations with the most recent activity recorded on 2026-07-29. Historical signals indicate:

• Consistent geolocation attribution to India (confidence 0.52)
• Stable network classification (no cloud, CDN, VPN, proxy, or hosting services)
• Persistent organizational attribution to RAVI GREWAL (confidence 0.95)
• No escalation in risk signals over time

---

## Network Context

Subnet Analysis (103.168.3.0/24):

• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

Relationship Graph:

• DNS associations: static-103-168-3-225.unpl.net
• Network associations: FOCUS
• No certificate or organization-level relationships beyond DNS and network data

---

## Recommended Actions

Based on the current risk profile, no immediate mitigation actions are required. The IP address demonstrates benign characteristics consistent with a standard residential or firewall-protected endpoint. SOC teams may:

• Log traffic for baseline reference
• Monitor for any changes in service activity or risk score
• Treat as low-priority if contacted by automated systems

Firewall/Blocking Decision: No blocking recommended at this time.

---

## Conclusion

IP 103.168.3.225/32 is a low-risk address with no active malicious indicators. The profile is consistent with legitimate infrastructure under the RAVI GREWAL organization. No immediate defensive action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.