# IP Intelligence Briefing: 103.173.21.215/32
Classification: LOW RISK
Date: 2026-07-29
Analysis Method: Full profile, historical, relationship, and neighborhood analysis
---
## Executive Summary
IP address 103.173.21.215 presents a low-risk threat profile with no active malicious indicators. The address belongs to the SHARVA network (ASN 146890) operated by MANOJ PATEL, with geolocation data indicating Ahmedabad, Gujarat, India. The IP shows no open services, no blacklist associations, and operates within a clean subnet neighborhood. No immediate defensive actions are recommended based on current intelligence.
---
## Network Profile & Ownership
- IP Address: 103.173.21.215/32
- ASN: 146890
- Organization: MANOJ PATEL
- Network Name: SHARVA
- CIDR Block: 103.173.20.0/23
- RIR: APNIC
- Abuse Contact: Available via RDAP
The infrastructure is registered under APNIC registration with the SHARVA network block. No ownership changes detected in the observation period.
---
## Geographic & Infrastructure Details
Geolocation:
- Country: India (IN)
- Region: Gujarat
- City: Ahmedabad
- Confidence: 52%
- Accuracy Radius: 1,500 km
Infrastructure Classification:
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- DNS: No PTR hostnames, no forward resolution
- Email Authentication: No SPF/DMARC records
- Cloud/CDN/Proxy: No indicators
The absence of open ports and services suggests the IP is either intentionally firewalled or represents infrastructure with restricted access.
---
## Threat Indicators
Current Risk Score: 0 (Low Risk)
Threat Profile:
- Blacklist Count: 0
- Known Campaigns: None
- Is Tor Exit: False
- Is Known Attacker: False
- Is Spam Source: False
- Abuse Confidence Score: None
- Pulsedive Risk: None
Control Plane Analysis:
- Operator Score: 0.1304 (Minimal)
- BGP Prefix: 103.173.20.0/23
- Route Stability: Unstable
- DNSSEC Valid: True
- DNSBL Listed: 0/8 lists
No malicious threat indicators detected across all monitored feeds.
---
## Historical Analysis
Observation Count: 13 signals recorded
Temporal Trends:
- Ownership Changes: 0
- Threat Observation Count: 0
- Threat Persistence Days: 0
- Persistently Malicious: False
- Threat Persistence: Stable (no observed escalation)
Recent observations from 2026-07-29 confirm:
- Consistent geolocation attribution to India
- Stable ownership with no changes
- Neighborhood classified as clean with 0 abuse density
- No emergence of new threat signals
The IP demonstrates stable behavior with no historical escalation in risk profile.
---
## Neighborhood Context (103.173.21.0/24)
Subnet Statistics:
- Total Siblings: 25
- Active Siblings: 10
- Abuse Density: 0
- Classification: Clean
- Inherited Risk: 0
Risk Distribution:
- High Risk: 0
- Medium Risk: 0
- Low Risk: 21
Neighbor analysis shows a predominantly clean subnet. The absence of high-risk neighbors supports the low-risk classification of this IP address.
---
## Relationship Graph
Identified Relationships:
- Same Network: SHARVA (3 occurrences)
No additional relationships detected with hostnames, organizations, or certificates. The relationship graph indicates isolated operation within the SHARVA network block.
---
## Recommended Actions
Security Actions: None recommended
Firewall Rules: Not required based on current risk profile
Rationale: The IP address demonstrates a low-risk profile with no active threat indicators. Standard network monitoring practices are sufficient. No specific blocking or mitigation rules are warranted at this time.
---
## Intelligence Assessment
IP 103.173.21.215 represents infrastructure with minimal threat activity. The combination of:
- Zero risk score
- No blacklist associations
- Clean neighborhood context
- Stable ownership history
- Absence of open services
...indicates this is likely legitimate infrastructure, possibly a reserved or internal address. SOC analysts may monitor but no immediate defensive action is required.
Confidence Level: High
Recommended Priority: Monitor
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | MANOJ PATEL |
| ASN | AS146890 |
| Network Name | SHARVA |
| CIDR Block | 103.173.20.0/23 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-21 19:02:23 UTC |
| Last Seen | 2026-07-29 09:53:27 UTC |
| Profile Built | 2026-07-29 10:08:32 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 17 |
Full dossier details are available via our API.