103.75.125.160

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IPDEBRIEF INTELLIGENCE BRIEFING

## Target: 103.75.125.160/32

Classification: CLEAN / LOW RISK

Date: July 2026

Analyst: IPDebrief SOC Intelligence

---

EXECUTIVE SUMMARY

IP 103.75.125.160 presents as a legitimate colocation hosting infrastructure asset with no malicious indicators. The address operates under Fornex Hosting (ASN 16003) in Rotterdam, Netherlands, and maintains a clean risk profile with zero abuse density in the 103.75.125.0/24 subnet.

---

OWNERSHIP & INFRASTRUCTURE

Organization: Fornex Hosting Ripe coordination
ASN: 16003
Network: ES-FORNEX-20160919 (103.75.124.0/22)
RIR: APNIC
Infrastructure Type: Colocation Hosting
Geolocation: Rotterdam, South Holland, Netherlands (52.13°N, 5.29°E)
DNS: dsnl140.fornex.org (forward confirmed)

---

NETWORK ROLE & SERVICES

Primary Role: Web Server
Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS)
Web Server: nginx/1.30.0
TLS Certificate: Let's Encrypt (CN=monkeyvillage.pro)
HTTP Response: 401 Unauthorized (unauthenticated access)

---

THREAT ASSESSMENT

Overall Risk Score: 0/100
Provider Score: 0
Authority Score: 0
Abuse Confidence Score: N/A
Blacklist Count: 0
Known Campaigns: None
Threat Indicators: None
Tor/VPN/Proxy: Not detected
Status: Not a known attacker or spam source

---

OBSERVATION HISTORY

Total Observations: 21
Classification Consistency: "Clean" across all observations
Threat Observation Count: 0
Persistence Status: Not persistently malicious
Ownership Changes: 0
Recent Activity: Stable infrastructure with no behavioral changes

---

NEIGHBORHOOD ANALYSIS

Subnet: 103.75.125.0/24
Abuse Density: 0 (clean subnet)
Threat Siblings: 0
Risk Distribution: No high or medium risk neighbors
Inherited Risk: 0

---

RELATIONSHIP GRAPH

DNS Associations: dsnl140.fornex.org (multiple records)
Network Association: ES-FORNEX-20160919
No Certificate or Organization Links: Beyond DNS and network associations

---

SECURITY RECOMMENDATIONS

No blocking required. The IP shows no malicious behavior and represents legitimate hosting infrastructure. Standard monitoring is sufficient. No firewall rules or WAF actions recommended at this time.

---

INTELLEIGENCE CONCLUSION

103.75.125.160 is a benign web hosting endpoint operated by Fornex Hosting. The address has a clean history, zero threat indicators, and operates within a subnet with no abuse density. No defensive action is warranted beyond standard baseline monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇳🇱 Netherlands
Region	South Holland
City	Rotterdam
Timezone	Europe/Amsterdam
Latitude	52.13
Longitude	5.29

🏢 Ownership & Registration

Organization	Fornex Hosting Ripe coordination
ASN	AS16003
Network Name	ES-FORNEX-20160919
CIDR Block	103.75.124.0/22
RIR	APNIC
Country	NL
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	dsnl140.fornex.org
Forward Confirmed	Yes — FCrDNS verified
Forward Hostnames	`nl.monkeyvillage.pro` `dsnl140.fornex.org`

🔐 DNS Hygiene

Hygiene Score	60% (Good)
SPF	1/2 domains
DMARC	0/2 domains
FCrDNS	Verified
DNSSEC	Valid
CAA	Not configured
Domains Checked	2 domains

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Web Server
Network Tier	Tier 3 — Basic operator with some routing infrastructure

Hosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
80	http	tcp	—
443	https	tcp	—
Closed Ports	22, 25, 3389, 8080, 8443 (2 open / 7 scanned)

Server	Web server detected
HTTP Title	—

🔐 TLS Certificate

🔒

CN=monkeyvillage.pro

Issued by CN=YE2, O=Let's Encrypt, C=US

Self-signed: No

SANs	*.monkeyvillage.promonkeyvillage.pro
Valid From	2026-07-15T18:22:02+00:00
Valid Until	2026-10-13T18:22:01+00:00
TLS Protocol	Tls13
Cipher Suite	TLS_AES_256_GCM_SHA384
Signature Algorithm	sha384ECDSA
Validity Period	89 days

🛡️ Public Network Snapshot

Origin ASN	AS16003
Network Prefix	103.75.125.0/24
Route mapping	Found
HSTS	Not detected
CSP	Not detected
HTTP/2	Enabled

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	23%	2	4
routing	8%	1	1
services	33%	2	6
ownership	23%	2	4
reputation	20%	1	3
geolocation	23%	2	4
Overall	21%	10	22

Coverage: 3/6 dimensions · Data sufficiency: partial

Data Coherence	Consistent (100%)
Attribution	Moderate (70%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-07-16 10:35:41 UTC
Last Seen	2026-09-05 01:21:18 UTC
Profile Built	2026-09-05 20:13:25 UTC
Data Freshness	Live
Signal Types	26
Total Observations	41

🔍 26 signal types · 41 observations collected

This report is generated from 26+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 103.75.125.160

Who owns the IP address 103.75.125.160?

103.75.125.160 is registered to Fornex Hosting Ripe coordination. The address falls within the 103.75.124.0/22 network block. Registration is held at APNIC.

Where is 103.75.125.160 located?

Geolocation data places 103.75.125.160 in Rotterdam, South Holland, Netherlands. The local time zone is Europe/Amsterdam. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 103.75.125.160 malicious or safe?

103.75.125.160 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 103.75.125.160?

The reverse DNS (PTR) record for 103.75.125.160 is dsnl140.fornex.org. This hostname is forward-confirmed, meaning it resolves back to the same address.

What ports are open on 103.75.125.160?

Responsive ports observed on 103.75.125.160 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.

Is 103.75.125.160 a VPN, proxy, or data center address?

103.75.125.160 is classified as hosting infrastructure based on network ownership and behavioural analysis.

🏘️ Related IP Addresses

Browse related networks

All addresses in AS16003 🇳🇱 Netherlands Network directory

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

103.75.125.160📋 Copy