103.175.168.185📋 Copy

IP INTELLIGENCE BRIEFING: 103.175.168.185/32

Classification: Low Risk | Last Updated: 2026-07-30

OWNERSHIP & GEOLOCATION

IP address 103.175.168.185 is assigned to Amit Sarkar under netname RCTVPL (ASN 135872) within the APNIC region. The address is registered to CIDR block 103.175.168.0/23 and geolocates to Kolkata, West Bengal, India. Control plane data indicates route instability (isRouteStable: false) with operator score 0.1304 (Minimal).

RISK PROFILE

Current risk score is 0. No threat indicators detected—abuse confidence score null, no known campaigns, zero blacklist listings, and no designation as Tor exit node, known attacker, or spam source. Provider and authority scores both register at 0.

NETWORK STATE

Port scan analysis shows no open ports; service purpose classified as "Firewalled / No Services." DNS resolution confirms PTR hostname 185-168.175.103.static.gtplkcbpl.in within the gtplkcbpl.in domain. Forward resolution confirmed with single hostname. No TLS certificates or HTTP services detected.

NEIGHBORHOOD CONTEXT

The /24 subnet (103.175.168.0/24) exhibits abuse density of 0.5 with "mostly_clean" classification. One threat sibling identified: 103.175.168.231 (risk score 25, authority score 50). This elevated-risk neighbor represents the only threat-adjacent IP in the immediate network segment.

OBSERVATION HISTORY

Signal history from 2026-07-30 demonstrates consistent behavior: geolocation signals point to Kolkata, India; traceroute completed with 30 hops; port scans show no exposed services. No evidence of escalating risk or threat emergence.

RECOMMENDED ACTIONS

No specific firewall rules or mitigation actions recommended. Risk score 0 indicates low-threat profile. However, monitor 103.175.168.231 (same /24 subnet) for threat activity. Standard logging of inbound/outbound traffic from 103.175.168.185 is sufficient given current risk posture.

SOC ANALYST NOTES

This IP represents a static residential assignment with no active services. The absence of open ports and zero threat indicators supports defensive monitoring rather than active blocking. The presence of a higher-risk sibling in the same subnet warrants periodic reassessment of the /24 segment.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.