103.206.137.35📋 Copy

## IP Intelligence Briefing: 103.206.137.35

Classification: Low Risk

Risk Score: 25

Report Date: July 28, 2026

Executive Summary

IP address 103.206.137.35 is associated with GTPL (Gujarat Telecommunication Pvt Ltd) infrastructure in Bhavnagar, Gujarat, India. The IP demonstrates a low-risk profile with no active threat indicators, no open services, and minimal neighborhood contamination. No immediate blocking action is recommended based on current signals.

Ownership and Network Classification

• ASN: 45916 (GTPL)
• Organization: IRT-GTPLBANSIDHARTELELINK-IN
• Network: GTPL_BANSIDHAR_TELELINK (103.206.136.0/22)
• RIR: APNIC
• Geolocation: Bhavnagar, Gujarat, India (20.59°N, 78.96°E)

The IP is classified as part of a telecommunications provider network with no hosting, CDN, or cloud infrastructure attributes. Service scanning returned no open ports, and the connection state indicates "Firewalled / No Services."

Threat Intelligence Indicators

• Risk Score: 25 (Low)
• Abuse Confidence: Not applicable
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Known Campaigns: None identified
• DNSBL Listings: 1 of 8 total lists

The IP shows no correlation with known malicious campaigns or threat feeds. Historical data indicates no persistent malicious behavior patterns.

Behavioral and Temporal Analysis

• Observation Count: 14 signals recorded
• Threat Persistence: 0 days
• Ownership Changes: 0
• Persistently Malicious: No

The IP has exhibited stable network classification and ownership attributes throughout the observation period. No escalation in threat signals detected.

Neighborhood Context (103.206.137.0/24)

• Abuse Density: 0 (clean subnet)
• Total Siblings: 3
• Active Siblings: 1
• Threat Siblings: 0

Neighbor Risk Assessment:

The /24 subnet demonstrates low overall abuse density. The single higher-risk neighbor (103.206.137.163, risk score 40) represents elevated but not critical threat levels. No threat siblings were identified.

Network Relationships

All detected relationships map to the GTPL_BANSIDHAR_TELELINK network infrastructure. The IP shows standard provider network relationships with no anomalous associations to external entities, hostnames, or certificates.

Recommended Actions

No specific firewall rules or blocking recommendations are generated based on the current low-risk profile. The following considerations apply:

• Monitor: Continue passive monitoring for service activation or behavioral changes
• Block: Not recommended at this time; risk score below action threshold
• Investigate: Only if correlated with suspicious traffic patterns or policy violations
• Allow: Legitimate GTPL infrastructure traffic is expected from this ASN

Conclusion

IP 103.206.137.35 presents a low-risk threat profile consistent with telecommunications infrastructure. No immediate defensive action required. SOC teams should monitor for service activation and maintain awareness of the elevated-risk neighbor at 103.206.137.163 within the same /24 subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.