103.94.185.95📋 Copy

# IP INTELLIGENCE BRIEFING

IP Address: 103.94.185.95/32

Analysis Date: 2026-07-29

Classification: LOW RISK

---

## EXECUTIVE SUMMARY

The target IP address 103.94.185.95 presents as a low-risk infrastructure endpoint associated with Hostsymbol Pte Ltd (ASN 40065). The IP resides within the 103.94.185.0/24 BGP prefix and demonstrates minimal threat activity. Geographic attribution shows inconsistencies between US-based and Singaporean signal sources, requiring defensive monitoring.

---

## OWNERSHIP AND NETWORK ATTRIBUTION

---

## GEOGRAPHIC ATTRIBUTION ANALYSIS

Geolocation signals exhibit conflicting data requiring defensive awareness:

• Primary Attribution: Los Angeles, California, US (Multi-source consensus)
• Secondary Signal: Singapore, SG (Confidence: 52%)
• Geo-Validation: Multiple source discrepancies detected (US vs SG)

This geographic inconsistency suggests the IP may be utilized across distributed infrastructure or reflects routing anomalies.

---

## THREAT INDICATORS AND REPUTATION

Risk Breakdown: Minimal operator score (0.1304), no persistent malicious activity detected.

---

## NETWORK SERVICES AND SIGNATURES

Service Status: Firewalled / No Services

DNS Resolution: Forward confirmation failed

Hosted Domains: 0

Open Ports: None detected

Observed Protocol Signatures:

• TLS: TLS 1.3, Cipher Suite: TLS_AES_256_GCM_SHA384
• HTTP Server: nginx/1.22.1
• SSH: OpenSSH_9.2p1 Debian-2+deb12u9

---

## OBSERVATION HISTORY ANALYSIS

Total Observations: 15 signals tracked

Most Recent: 2026-07-29T01:39:35 UTC

Temporal Trends:

• No ownership changes observed
• No persistent malicious behavior detected
• Threat observation count: 0
• Risk stability: Maintained at low levels

Notable Signals:

• One signal flagged "has_threats": true with Pulse references
• Multiple geolocation sources with varying confidence levels
• TLS/SSH banner data indicates active service presence despite "no services" classification

---

## SUBNET ANALYSIS

Subnet: 103.94.185.0/24

Abuse Density: 0 (Minimal)

Total Siblings: 2

The subnet demonstrates low abuse density with no high-risk neighbors detected.

---

## RELATIONSHIP MAPPING

Direct Relationships: 3

Type: Same Network (HOSTSYMBOL2-SG)

External Links: None detected (No associated hostnames, organizations, or certificates)

---

## DEFENSIVE RECOMMENDATIONS

1. Monitor Geographic Inconsistencies: Continue tracking conflicting geolocation signals (US vs SG) as they may indicate infrastructure changes or routing anomalies.

2. Baseline Current State: With risk score of 25 and low abuse density, establish current baseline for future comparison.

3. DNSBL Monitoring: One DNSBL listing detected; verify list contents and assess impact.

4. Subnet Context: No elevated risk observed in 103.94.185.0/24 subnet; neighbor 103.94.185.230 mirrors current risk profile.

5. Service Monitoring: Despite "firewalled" classification, TLS and SSH signatures indicate active services; monitor for port changes.

---

## CONCLUSION

IP 103.94.185.95 is a low-risk infrastructure endpoint associated with Hostsymbol Pte Ltd. No immediate threats detected. Geographic signal conflicts warrant continued monitoring, but overall network posture remains stable with minimal abuse indicators. No immediate blocking action recommended; maintain baseline monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.