103.67.96.21📋 Copy

# IP Intelligence Briefing: 103.67.96.21/32

Classification: Low Risk / No Immediate Threat Indicators

Date: 2026-07-29

Reporting Analyst: IPDebrief Intelligence Platform

---

## Executive Summary

IP 103.67.96.21 is assessed as low-risk with a reputation score of 25. The address belongs to IRT-ALEXA-IN (Alexa) under ASN 135760 within the APNIC RIR. Current observation shows no active threat indicators, with the subnet classified as clean and zero threat siblings observed in the immediate /24 neighborhood.

---

## Technical Profile

Ownership & Registration:

• ASN: 135760
• Organization: IRT-ALEXA-IN (Alexa)
• Network Block: 103.67.96.0/23
• RIR: APNIC
• Abuse Contact: Available via RDAP

Geolocation:

• Country: India (IN)
• Region: West Bengal
• City: Howrah
• Distance from reference point: 7,485.6 km
• Geo validation: Plausible (ICMP validation blocked)

Network Classification:

• Provider Infrastructure: No
• CDN/Cloud/VPN: No
• Proxy/Tor: No
• Hosting/Residential: No
• Anycast: No
• Bogon: No

Service Status:

• Open Ports: None detected (firewalled/no services)
• TLS Certificates: None
• HTTP Title: None
• DNS Records: No PTR, no forward resolution confirmed

---

## Threat Indicators

Current Threat Profile:

• Abuse Confidence Score: Not available
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: None
• Known Attacker Status: No
• Spam Source: No
• Tor Exit Node: No

Control Plane Analysis:

• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)
• Route Stability: Unstable
• Route Changes (30d): 0
• RPKI State: Not available
• IRR Consistency: Not available

---

## Neighborhood Analysis

Subnet: 103.67.96.0/24

• Abuse Density: 0 (Clean)
• Total Siblings: 7
• Active Siblings: 7
• Threat Siblings: 0

Neighbor Risk Distribution:

Assessment: The /24 subnet demonstrates clean operational characteristics with no high or medium-risk neighbors. Inherited risk is 0.

---

## Historical Observations

Observation Count: 17 total signals

Recent Activity:

• 2026-07-29 18:08: Subnet classification clean, abuse density 0
• 2026-07-29 18:04: Port scan activity detected (no open services confirmed)
• 2026-07-29 18:02: Geolocation signal inconsistency observed (one signal indicated New York, US)
• Multiple ICMP/probing attempts recorded

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

Note: Geographic validation remains inconsistent across signals, with conflicting location data between India (registration) and United States (hop-based signal). This may indicate routing anomalies or multi-CDN infrastructure.

---

## Relationships Graph

Connected Entities: 6 relationships identified

• All relationships map to "Same Network" type pointing to network: ALEXA
• No organization, hostname, or certificate relationships detected beyond network-level associations

---

## Recommended Actions

Firewall/Network Security:

• No blocking action required based on current risk profile
• Monitor for changes in DNSBL listings or new threat indicators
• Standard logging recommended for network traffic analysis

SOC Analyst Guidance:

• This IP shows no immediate threat characteristics
• Low-risk classification supports normal network operations
• Monitor historical patterns for emerging threat activity
• No immediate takedown or blocking action indicated

---

## Conclusion

IP 103.67.96.21 is classified as low-risk with clean neighborhood characteristics and no active threat indicators. The subnet demonstrates stable operational behavior with zero abuse density. No immediate defensive action is required, though standard monitoring practices are recommended to detect any future changes in behavior or reputation.

Threat Level: LOW

Action Required: MONITOR

Confidence: HIGH

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.