103.168.57.31📋 Copy

IP Intelligence Briefing: 103.168.57.31

*Generated via IPDebrief tools: Profile, History, Relationships, Neighbors, Actions*

---

**1. Core Profile**

• Risk Score: 80/100 (High Risk)
• Ownership: Owned by IRT-AXOMNET-IN (APNIC registered).
• Geolocation: Inferred to India (latitude 20.59, longitude 78.96) with 1500km accuracy.
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP activity).
• Threat Indicators: No direct malicious activity (no indicators, blacklists, or campaigns).

---

**2. Observation History**

• Recent Activity (2026-06-17):

- Inferred location in India (confidence 52%).

- Listed in 6/8 DNSBLs (high-severity listings).

• Historical Data (2026-06-02):

- Clean subnet classification (abuse density 0).

- No CDN/VPN/mobile/residential flags.

---

**3. Relationships**

• Linked to AXOMNET network (repeated in relationships).
• No hostnames, certificates, or organizational ties detected.

---

**4. Neighborhood Analysis**

• Subnet: 103.168.57.31/24.
• Abuse Density: 0% (clean classification).
• Neighbors: No sibling IPs found (likely isolated host).

---

**5. Recommended Actions**

• Block the IP:

- `iptables -A INPUT -s 103.168.57.31 -j DROP`

- `nft add rule inet filter input ip saddr 103.168.57.31 drop`

• Monitor: Increase logging verbosity due to elevated risk score.
• Investigate: Check AXOMNET network for associated risks (103.168.57.0/24).

---

**6. Key Takeaways**

• High Risk Despite Clean Subnet: The IP’s high score stems from DNSBL listings and inferred location, not direct malicious activity.
• Potential False Positive: Clean classification and no open services suggest it may be a misclassified or low-risk host.
• Prioritize: Block the IP to prevent potential lateral movement, especially given DNSBL associations.

SOC Note: Validate DNSBL context and monitor AXOMNET for related threats.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.