103.185.100.82📋 Copy

# IP Intelligence Briefing: 103.185.100.82/32

Classification: LOW RISK / MINIMAL THREAT

Date: 2026-07-27

Prepared for: SOC Analysts

---

## Executive Summary

IP address 103.185.100.82 is a low-risk residential/infrastructure endpoint located in Haryana, India, associated with AS149557 (AD MIN, GRBINFO). The IP exhibits minimal threat indicators with a risk score of 25/100, no active malicious campaigns, and no open services. No immediate blocking action required based on current threat profile.

---

## Threat Profile

---

## Network Intelligence

• ASN: 149557 (AD MIN)
• Organization: GRBINFO
• CIDR Block: 103.185.100.0/24
• RIR: APNIC (Asia Pacific)
• Country: India (IN)
• Region: Haryana
• City: Rewāri

---

## Network Role Classification

• Infrastructure Type: Firewalled / No Services
• Services Detected: None
• Open Ports: None
• TLS Certificate: None
• HTTP Banner: None

The target IP does not expose any services, indicating a passive or protected endpoint.

---

## Relationship Analysis

The IP shares its network prefix with GRBINFO infrastructure.

---

## Neighborhood Assessment (103.185.100.0/24)

• Total Neighbors: 2
• Abuse Density: 0.0
• High Risk: 0
• Medium Risk: 0
• Low Risk: 1

The /24 subnet demonstrates minimal abuse activity, with no high-risk neighbors detected.

---

## Observation History

• Total Observations: 11
• Threat Persistence Days: 0
• Ownership Changes: 0

Recent signals consistently indicate India (IN) with geolocation confidence at 0.52. Operator score remained stable at 0.1304 across observation windows. No persistent malicious behavior observed.

---

## Control Plane Analysis

• BGP Prefix: 103.185.100.0/24
• Route Stability: False
• RPKI State: Not validated
• IRR Consistency: Not validated
• DNSSEC Valid: True
• Route Changes (30d): 0

---

## Recommended Security Actions

Based on the low-risk profile (Score: 25), no immediate firewall or blocking rules are recommended. The IP should be monitored but does not warrant active mitigation at this time.

---

## Intelligence Assessment

The target IP 103.185.100.82 presents a low-risk profile with minimal threat indicators. Key findings:

1. No Active Threats: Zero threat indicators, no blacklist entries, no known campaigns

2. No Open Services: Firewall-protected endpoint with no exposed ports or services

3. Clean Neighborhood: Associated /24 subnet shows zero abuse density

4. Stable Ownership: No recent ownership changes or persistent malicious activity

Recommended SOC Actions: Monitor passively. No blocking required unless additional threat intelligence emerges.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.