103.173.37.58📋 Copy

# IP Intelligence Briefing: 103.173.37.58/32

Classification: Low Risk / Monitoring Required

Date: 2026-07-24

---

## Executive Summary

IP address 103.173.37.58 presents a low-risk profile with a risk score of 25. The IP is registered to IRT-IMAGEIT-BD under ASN 133099 within the 103.173.36.0/23 block (APNIC RIR). Current observation indicates the address is not actively malicious, though it appears on one DNS blacklist. The IP is classified as firewalled with no active services.

---

## Ownership & Geolocation

• Organization: IRT-IMAGEIT-BD
• ASN: 133099
• Country: Bangladesh (BD)
• Coordinates: 23.7°N, 90.37°E
• CIDR Block: 103.173.36.0/23
• Abuse Contact: Available via RDAP

---

## Threat Profile

• Risk Score: 25/100 (Low)
• Blacklist Status: Listed on 1 of 8 DNS blacklists
• Threat Indicators: None detected
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

## Network Classification

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: Inactive (no forward resolution)
• Hosted Domains: None
• Email Authentication: No SPF/DMARC records present

---

## Observation History

The IP has generated 12 historical observations as of 2026-07-24. Recent signals confirm:

• Subnet classification: Clean
• Abuse density: 0.0
• Inherited risk: 0
• Ownership stability: Consistent (IRT-IMAGEIT-BD)
• No escalation in threat activity observed

---

## Neighborhood Analysis

• Subnet: 103.173.37.58/24
• Abuse Density: 0%
• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• No neighboring IPs flagged with elevated risk in the /24 range.

---

## Relationship Graph

Single relationship identified:

• Type: Same Network
• Target: IMAGEIT-BD

---

## Recommended Security Actions

Risk Level: Low (25/100)

No immediate blocking or filtering actions are recommended based on current threat profile. The IP does not exhibit malicious behavior indicators and maintains a stable ownership pattern. However, the single DNS blacklist listing warrants continued monitoring.

Suggested Actions:

• Permit traffic unless other contextual signals indicate otherwise
• Monitor for changes in DNSBL status
• Review firewall rules for any existing blocks related to this subnet

---

## Analyst Notes

This IP represents a legitimate infrastructure address with minimal abuse indicators. The single DNSBL listing appears isolated and does not correlate with active threat campaigns. No immediate defensive action required, but maintain awareness of the blacklist status and monitor for any changes in risk profile or associated network activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.