194.102.105.96📋 Copy

IP Intelligence Briefing: 194.102.105.96/32

Executive Summary

The IP address 194.102.105.96 presents as a low-risk infrastructure endpoint with no active threat indicators. The address is associated with a mail service hostname and shows no open ports or services. Risk scores remain at baseline levels across all dimensions.

---

Technical Profile

---

Threat Indicators

• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Blacklist Count: 0
• Abuse Confidence Score: Null
• Threat Feeds: No active matches

---

Observation History

Signal analysis indicates 13 observations with mixed geolocation signals. Recent data shows conflicting geolocation reports between GB and RO (Romania), indicating potential routing anomalies or multi-path traffic. Operator score recorded at 0.2609 with 3 of 8 signals covered. The IP shows no persistent malicious behavior patterns.

---

Network Relationships

• DNS Association: mail.exoxcapitalglobal.com
• Related Entities: Single hostname association
• Network Role: Mail server infrastructure

---

Subnet Analysis (194.102.105.0/24)

• Abuse Density: 0
• Sibling IPs: 1 active neighbor (194.102.105.105) with risk score 25
• Classification: Low-risk subnet environment
• Total Siblings: Minimal neighborhood activity

---

Recommended Security Actions

Firewall Rule Recommendation: No blocking or rate-limiting rules required. Standard logging and monitoring protocols apply.

---

Intelligence Assessment

This IP represents benign mail infrastructure with no observed malicious activity. The single neighboring IP (194.102.105.105) shows elevated risk (score 25) and may warrant separate investigation if traffic patterns indicate lateral movement or shared infrastructure risks. No immediate defensive actions required for 194.102.105.96.

Classification: LOW RISK — Passive monitoring recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.