103.86.57.110📋 Copy

# IP Intelligence Briefing: 103.86.57.110/32

Classification: Low Risk

Report Date: 2026-07-17

Risk Score: 25/100

---

## Executive Summary

IP 103.86.57.110 is classified as low risk with a score of 25/100. The address is registered to IRT-WEB-NETWORKS-NP (ASN 136380) under APNIC RIR jurisdiction. Current threat indicators show no active malicious activity, no open services, and no blacklist presence. The subnet 103.86.57.0/24 maintains a clean classification with zero abuse density.

---

## Ownership and Registration

---

## Geolocation Analysis

The IP exhibits geolocation inconsistencies across data sources:

• Profile Data: London, GB (P5 region)
• Historical Observations: Multiple signals indicate Nepal (NP) coordinates (28°N, 84°E)
• GeoConsensus: False
• GeoPlausible: False

This discrepancy warrants monitoring but does not currently indicate active threat behavior.

---

## Network Characteristics

• Network Role: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: No PTR records, no forward resolution, zero hosted domains
• Certificate Status: No TLS certificates
• HTTP Services: No HTTP title or banner detected
• Traceroute: 19 hops; transit networks include Comcast and Cogent

---

## Threat Intelligence

• Abuse Confidence Score: None
• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Known Campaigns: None
• Threat Feeds: Empty
• Honeypot Hits: 0
• WAF Violations: 0
• Enumeration Strikes: 0

---

## Subnet Analysis (103.86.57.0/24)

• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor Risk Distribution: High: 0, Medium: 0, Low: 0

---

## Temporal Behavior

• Ownership Changes: 0
• Average Ownership Days: Not applicable
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Is Persistently Malicious: False
• Route Changes (30d): 0
• Is Route Stable: False

---

## Recommended Security Actions

No automated firewall rules or recommendations generated at this time. The IP presents low-risk characteristics with no actionable threat indicators. Standard monitoring is sufficient.

---

## Relationship Graph

Two relationships identified:

• Same Network: WEB-NETWORKS-NP (appears twice in relationship data)

---

## Intelligence Narrative

The IP address 103.86.57.110 is currently operating in a low-risk posture. Registration data indicates it belongs to IRT-WEB-NETWORKS-NP, an APNIC-registered network with no provider or authority scoring. Despite geolocation inconsistencies between profile data (London, GB) and historical observations (Nepal), the IP shows no active threat indicators. The network has no open services, no blacklist presence, and the surrounding /24 subnet maintains a clean classification with zero abuse density. The address is not associated with known campaigns, Tor exit nodes, or any persistent malicious activity. No automated defensive actions are recommended at this time; standard network monitoring protocols are appropriate.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.