103.235.0.38📋 Copy

## IP Intelligence Briefing: 103.235.0.38/32

Classification: Moderate Risk | Date: 2026-07-25

---

Executive Summary

IP address 103.235.0.38 presents a moderate risk profile (score: 40/100) with no active threat indicators. The IP belongs to organization GAVIMERCANTILES within the 103.235.0.0/22 block, registered with ASN 137166 in Mumbai, India. Network activity is limited, with no open ports or active services detected.

Network Ownership & Geolocation

• Organization: GAVIMERCANTILES (manager admin)
• ASN: 137166
• CIDR Block: 103.235.0.0/22
• Geolocation: Mumbai, Maharashtra, India (IN)
• RIR: APNIC
• Geolocation Accuracy: ~1,500 km radius (multi-source consensus)

Risk Assessment

• Overall Risk Score: 40 (Moderate Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 blacklists (0 of 8 total lists)
• DNSBL Listed: 2 lists
• Operator Score: 0.1304 (Minimal)
• Is Known Attacker: No
• Is Tor Exit Node: No
• Is Spam Source: No

Technical Profile

• Network Role: Firewalled / No Services
• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None
• PTR Records: None
• Forward DNS Resolution: 0 records
• Hosted Domains: None

Neighborhood Analysis (103.235.0.0/24)

• Subnet Classification: Clean
• Abuse Density: 0 (clean)
• Total Siblings: 3
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor IPs:

- 103.235.0.5: Risk Score 0

- 103.235.0.19: Risk Score null

No correlated threat activity observed within the /24 neighborhood.

Historical Observations

Thirteen observations recorded as of 2026-07-25, with no evidence of escalating threat behavior:

• Geolocation signals consistent across observations
• Ownership stability maintained (0 ownership changes)
• Threat persistence: 0 days
• Not classified as persistently malicious
• No campaign correlations detected

Control Plane & BGP

• Origin ASN: 137166
• BGP Prefix: 103.235.0.0/24
• Route Stability: Unstable (route changes detected in past 30 days)
• RPKI State: Not applicable
• DNSSEC Valid: Yes

Recommended Actions

Given the moderate risk score and absence of active threat indicators, implement the following:

Intelligence Narrative

The IP 103.235.0.38 maintains a moderate risk posture without observable malicious activity. The absence of open ports, DNS services, or threat indicators suggests the address may be dormant, reserved, or used for legitimate purposes. The subnet exhibits clean characteristics with no abusive activity among sibling IPs. While the moderate risk score warrants attention, the lack of blacklist entries, zero threat indicators, and stable ownership history indicate this is not an active threat actor. Continued monitoring is recommended, particularly to observe any service activation or network behavior changes.

---

Briefing Prepared: 2026-07-25

Data Source: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.