103.208.104.55📋 Copy

# IP Intelligence Briefing: 103.208.104.55/32

Classification: Low Risk / Infrastructure

Date: Current Analysis Cycle

Intel Level: SOC Awareness

---

## Executive Summary

IP address 103.208.104.55 is a Low Risk (score: 25) infrastructure endpoint registered to RAILTEL-IN (Network Administrator) under ASN 24186. The address belongs to the 103.208.104.0/24 subnet within the larger 103.208.104.0/22 block allocated by APNIC. No active services, no threat indicators, and no malicious reputation signals were observed.

---

## Technical Profile

Network Ownership:

• ASN: 24186
• Organization: Network Administrator (RAILTEL-IN)
• CIDR Block: 103.208.104.0/22
• RIR: APNIC
• Abuse Contact: abuse@railtelindia.com

Geolocation:

• Country: India (IN)
• City: East Kidwai Nagar
• Region: New Delhi
• Postal Code: Delhi-110023
• Accuracy Radius: 1,500 km

Network Services:

• Open Ports: None detected
• Service Classification: Firewalled / No Services
• TLS Certificates: Not present
• DNS Records: No forward resolution

---

## Threat Assessment

Risk Score: 25 / 100 (Low Risk)

Threat Indicators:

• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Abuse Confidence Score: Not applicable

Control Plane Data:

• DNSBL Listed: 1 of 8 total lists
• Route Stability: False
• RPKI State: Not validated
• IRR Consistency: Not validated

---

## Neighborhood Analysis

Subnet: 103.208.104.55/24

Abuse Density: 0 (Clean)

Total Siblings: 2

Active Siblings: 1

Threat Siblings: 0

Neighbor Profile:

• 103.208.104.45: Risk Score 25 (Low Risk)

The surrounding /24 subnet demonstrates a clean abuse profile with no malicious activity detected among sibling addresses.

---

## Historical Observation

Total Observations: 11

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: False

Geolocation and ownership data remained consistent across all observation cycles. No escalation in threat activity or network classification changes detected.

---

## Relationship Mapping

Identified Relationships:

• Same Network: RAILTEL-IN (x2 instances)

No cross-relationship links to external organizations, hostnames, or certificates were identified beyond the immediate network registration.

---

## Recommended Actions

Security Recommendations: None Required

Firewall Rules: Not applicable — no actionable threats detected

SOC Guidance:

• Monitor for service activation if previously firewalled
• No immediate blocking or mitigating actions warranted
• Standard traffic logging sufficient for compliance

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.