103.196.9.56📋 Copy

# INTELLIGENCE BRIEFING: 103.196.9.56/32

Classification: LOW RISK | Date: 2026-07-04 | Priority: STANDARD

---

## EXECUTIVE SUMMARY

IP 103.196.9.56 is classified as LOW RISK (score: 25/100). The address is firewalled with no active services and belongs to a clean subnet (abuse density: 0). No threat indicators or malicious activity observed. Routine monitoring recommended.

---

## OWNERSHIP & INFRASTRUCTURE

Status: Firewalled / No Services Detected

---

## THREAT ASSESSMENT

Risk Score: 25 (Low Risk)

Threat Indicators:

• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None
• Pulsedive Risk: Not applicable

DNSBL Analysis: 1 listing detected across 8 total lists (dnsblListedCount: 1, dnsblTotalLists: 8)

Network Role: Provider/Infrastructure classification not determined

---

## NETWORK CONTEXT

Subnet Analysis: 103.196.9.0/24

• Total Siblings: 4
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0 (Clean)
• Classification: Clean

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 3

Related Neighbors:

• 103.196.9.66 (Risk: 25, Authority: 50)
• 103.196.9.103 (Risk: null)
• 103.196.9.146 (Risk: 25, Authority: 50)
• 103.196.9.179 (Risk: 25, Authority: 50)

---

## OBSERVATION HISTORY

Total Observations: 12

Recent Activity:

• 2026-07-04 02:45:58 UTC — Subnet classified as clean, abuse density 0
• 2026-07-04 02:43:56 UTC — Ownership stable (0 changes), not persistently malicious
• 2026-07-04 02:41:34 UTC — Operator score minimal (0.1304)
• 2026-07-04 02:40:52 UTC — Ownership confirmed (code200_noc, abuse@code200.global)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

---

## SERVICES & DNS

Open Ports: None detected

TLS Certificates: None

Hosted Domains: 0

Email Auth: SPF/DMARC not configured

PTR Hostnames: None

---

## RECOMMENDED ACTIONS

Status: No immediate blocking required

Firewall Rules: None recommended (risk score 25 below threshold for blocking)

Monitoring: Continue passive observation. No active threat indicators present.

---

Analyst Notes: This IP represents infrastructure with minimal risk posture. The subnet maintains clean classification with no threat siblings. No actionable threat intelligence requiring immediate remediation.

Next Review: Routine monitoring recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.