103.174.145.35📋 Copy

# IP Intelligence Briefing: 103.174.145.35

## Executive Summary

IP address 103.174.145.35 is classified as High Risk (risk score: 80) and is associated with Indian hosting infrastructure provider IRT-VAIDIK-IN (ASN 135718). The IP exhibits elevated threat indicators through DNSBL listings while remaining firewalled with no active services.

## Ownership & Infrastructure

• Organization: IRT-VAIDIK-IN
• Network Name: VAIDIK
• ASN: 135718
• CIDR Block: 103.174.144.0/23
• RIR: APNIC
• Registration: Ahmedabad, Gujarat, India
• Geolocation Confidence: Validated (6,384 km from probe location, 218ms RTT)

## Threat Assessment

• Risk Score: 80/100 (High Risk)
• Threat Indicators: DNSBL listed on 5 of 8 total lists (max severity: high)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Network Classification: Firewalled / No Services (no open ports detected)

## Network Behavior

• DNS Resolution: None observed (forwardConfirmed: false)
• Email Authentication: No SPF or DMARC records
• HTTP Services: None (no open ports, no TLS certificates)
• Control Plane: Route stable, BGP prefix 103.174.145.0/24, DNSSEC valid

## Neighborhood Analysis

• Subnet: 103.174.145.35/24
• Abuse Density: 1 (elevated)
• Classification: Mostly clean
• Active Siblings: 0
• Threat Siblings: 1
• High-Risk Neighbors: 0

## Historical Observations

Analysis of signal history reveals persistent DNSBL listings with maximum severity ratings observed. Recent observations (June 2026 timeframe) indicate:

• DNSBL listing signals with high severity classification
• Operator score consistently rated as "Minimal" (0.1739)
• No significant changes in ownership or network role

## Relationships

The IP shares the VAIDIK network infrastructure with 15 related entities, all classified as "Same Network" relationships. No external hostnames, certificates, or organizational links detected beyond the network assignment.

## Recommended Actions

Based on the High Risk classification and DNSBL listings:

1. Firewall Rule: Consider blocking outbound/inbound traffic to 103.174.145.35 if not required for business operations

2. Monitoring: Add to SIEM alerting for connection attempts

3. Threat Intelligence: Monitor DNSBL listing status periodically

4. Neighbor Monitoring: Track threat sibling within 103.174.145.0/24 subnet

## Conclusion

This IP represents a firewalled infrastructure asset with elevated threat indicators through blacklist associations. While not actively serving malicious traffic, the DNSBL presence warrants defensive monitoring and consideration for network filtering policies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.