103.191.123.25📋 Copy

# IP Intelligence Briefing: 103.191.123.25/32

Classification: LOW RISK

Report Date: 2026-07-29

Analyst: IPDebrief Intelligence

## Executive Summary

IP 103.191.123.25 is classified as a low-risk residential endpoint. Risk score: 0. No active threat indicators, blacklist entries, or known campaign associations detected. The IP shows consistent residential classification across observation history with no signs of malicious activity or infrastructure abuse.

## Ownership & Network Context

• Organization: Wali Telecom administrator
• Network: WALITELECOM-PK (103.191.122.0/23)
• ASN: Not assigned (null)
• RIR: APNIC
• Registration: Lahore, Pakistan (netname: WALITELECOM-PK)
• Abuse Contact: abuse@walitel.com
• Infrastructure Type: Residential

## Geolocation Assessment

• Primary Location: Lahore, Pakistan (APNIC registration data)
• Secondary Location: Marseille, France (geolocation probe data)
• GeoConsensus: True (1 source)
• Note: Geographic data shows inconsistency between registration and probe data, typical for residential ISP allocations

## Threat Profile

• Risk Score: 0
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: Not calculated (null)
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: None matched

## Network Classification

• Network Role: Residential Endpoint
• Connection Type: Residential
• Service Purpose: Residential Endpoint
• Not Identified As: Cloud, CDN, VPN, Proxy, Hosting, Mobile, Anycast, Bogon

## Observation History

• Total Observations: 7
• Latest Observation: 2026-07-29T23:10:48 UTC
• Classification Consistency: Stable (residential endpoint classification maintained across all observations)
• Risk Trend: Minimal/No change
• Threat Persistence: None
• Ownership Changes: 0

## Neighborhood Analysis (103.191.123.0/24)

• Total Siblings: 25
• Abuse Density: 0 (low)
• Risk Distribution:

- High Risk: 0

- Medium Risk: 1

- Low Risk: 20

• Notable Siblings:

- 103.191.123.67: Risk Score 40

- 103.191.123.11, 103.191.123.30, 103.191.123.34: Risk Score 25

• Assessment: Subnet shows minimal abuse density. Target IP is not among flagged siblings.

## Relationships

• Same Network: WALITELECOM-PK (1 relationship)
• Associated Hostnames: None
• Associated Certificates: None
• Associated Organizations: None

## Recommended Actions

• Firewall Rules: No specific rules required
• Monitoring: Continue standard monitoring; no immediate action needed
• Threat Response: No incident response required

## SOC Analyst Notes

1. Low Priority: This IP presents no immediate threat. Standard residential endpoint handling applies.

2. Geolocation Discrepancy: Geographic data conflict (Pakistan vs France) may warrant future investigation if traffic patterns suggest cross-border anomalies.

3. Subnet Context: One medium-risk sibling detected in /24; monitor if target IP traffic correlates with known abuse patterns from 103.191.123.67.

4. No Immediate Action Required: No firewall rules, blocks, or alerts recommended based on current risk profile.

---

*Data Sources: IPDebrief Intelligence Platform*

*Classification: Defensive Security Intelligence*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.