103.170.55.50📋 Copy

## IP Intelligence Briefing: 103.170.55.50/32

Classification: Low-Risk Residential Internet Connection | Report Date: July 24, 2026

Executive Summary

IP address 103.170.55.50 is a residential endpoint operated by NAJEEB VS (THRISSUR network) in Thrissur, Kerala, India. The IP presents moderate risk (score: 40) but shows no active malicious indicators, no open services, and minimal control plane operator risk. The subnet exhibits clean abuse density (0.0), with no high-risk neighbors.

Ownership & Geolocation

• ASN: 138754 (NAJEEB VS)
• Organization: THRISSUR
• Country: India (IN)
• Region: Kerala (KL)
• City: Thrissur
• CIDR Block: 103.170.54.0/23 (APNIC)
• Abuse Contact: thrissursatelite@gmail.com

Threat Indicators

• Risk Score: 40 (Moderate Risk)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 2 of 8 DNSBL lists
• DNSBL Listed: Yes (2 lists)
• Campaign Correlation: None detected

Network Role & Services

• Infrastructure Type: Residential/ISP endpoint
• Connection Type: Dynamic residential
• Open Ports: None (Firewalled/No Services)
• Service Status: No active services detected
• TLS Certificate: None

DNS Analysis

• PTR Hostname: keralavisionisp-dynamic-50.55.170.103.keralavisionisp.com
• Forward Resolution: Confirmed (1 hostname)
• Email Authentication: SPF: Yes, DMARC: Yes
• Forward Resolution Count: 1
• Reverse Resolution Count: 1

Control Plane Assessment

• Operator Score: 0.1304 (Minimal)
• Route Stability: False
• BGP Prefix: 103.170.55.0/24
• RPKI State: Not evaluated
• DNSSEC Valid: Yes
• IRR Consistency: Not evaluated

Neighborhood Analysis (103.170.55.0/24)

• Subnet Abuse Density: 0 (Clean)
• Total Siblings: 6
• Active Siblings: 1
• Threat Siblings: 0
• Risk Distribution: High: 0, Medium: 1, Low: 2
• Notable Neighbors:

- 103.170.55.27 (Risk: 40)

- 103.170.55.22 (Risk: 25)

- 103.170.55.109 (Risk: 25)

Historical Observations

• Total Observations: 15
• Threat Persistence Days: 0
• Ownership Changes: 0
• Is Persistently Malicious: No
• Recent Signals: Ownership, geolocation, control plane operator, subnet classification all stable as of July 24, 2026

Relationship Graph

• Same Network: THRISSUR (2 associations)
• DNS Associations: keralavisionisp-dynamic-50.55.170.103.keralavisionisp.com (3 associations)

Recommended Actions

Based on the risk profile, the following actions are recommended:

Firewall Rules:

• Permit outbound traffic on standard ports (TCP 80, 443)
• Block inbound traffic on non-standard ports
• No blocking recommended for this IP based on current risk profile

Monitoring:

• Monitor DNS queries to keralavisionisp.com domain
• Track for any service openings on previously closed ports
• Observe neighbor IP 103.170.55.27 (higher risk score: 40)

Alerting:

• No immediate alerting required
• Monitor for DNSBL listing changes
• Alert if open ports appear on previously firewalled endpoint

Conclusion

IP 103.170.55.50 represents a standard residential internet endpoint with no active threat indicators. The moderate risk score reflects its DNSBL listings and residential ISP classification rather than malicious activity. No immediate defensive action is required, but standard residential IP monitoring practices are recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.