103.60.175.64📋 Copy

# IP Threat Intelligence Briefing: 103.60.175.64

Classification: Moderate Risk (55/100)

Date of Analysis: Current

Intelligence Source: IPDebrief Intelligence Platform

## Executive Summary

IP address 103.60.175.64 is a Bangladesh-based IP from Mazedanetworks.net with a moderate risk score of 55/100. The IP shows network instability and is listed on 3 out of 8 DNSBLs. While no active threat indicators were detected, the elevated risk score warrants monitoring and defensive firewall rules.

## Geographic and Network Attribution

• Country: Bangladesh (BD) – Dhaka Division
• ASN: 63996
• BGP Prefix: 103.60.175.0/24
• Organization: IRT-MNL-BD (Mazedanetworks)
• DNS Domain: mazedanetworks.net
• PTR Record: 103.60.175-64.mazedanetworks.net

The BGP route is marked as unstable, indicating potential routing anomalies or recent network changes.

## Threat Profile

• Risk Score: 55/100 (Moderate Risk)
• Abuse Confidence: Not applicable
• Blacklist Status: Listed on 3 DNSBLs
• Known Threat Indicators: None detected
• Tor/Proxy/VPN: Negative
• Campaign Association: No known campaigns correlated

The IP shows no active malicious indicators but maintains an elevated risk posture due to DNSBL listings and operator scoring of 0.1304 (Minimal).

## Neighborhood Analysis

Subnet 103.60.175.0/24 shows:

• Abuse Density: 0
• Active Neighbors: 2
• Risk Distribution: 1 medium-risk neighbor (103.60.175.34, score 55), 1 unassessed (103.60.175.100)

The subnet demonstrates low abuse density with one peer IP sharing the same moderate risk score.

## Historical Signals

Twelve observations recorded with signals from APNIC (IRT-MNL-BD), MaxMind geolocation (Dhaka), and control plane data. Recent signals indicate consistent network registration under IRT-MNL-BD with abuse contact abuse@mazedanetworks.net.

## Recommended Actions

Monitoring: Increase logging verbosity and review recent activity from this IP source.

Firewall Rules (Deploy as needed):

• iptables: `iptables -A INPUT -s 103.60.175.64 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 103.60.175.64 drop`
• nginx: `deny 103.60.175.64;`
• pfSense: Block 103.60.175.64/32
• Cloudflare WAF: Block via expression `ip.src eq 103.60.175.64`
• AWS WAF: Add 103.60.175.64/32 to block set

## SOC Analyst Guidance

This IP presents a moderate risk requiring defensive monitoring. The moderate score combined with DNSBL listings suggests either legitimate high-traffic activity or sporadic abuse. Implement firewall blocking if this IP initiates connection attempts to your infrastructure, and monitor for any behavioral anomalies. The associated subnet shows similar risk profiles, warranting consideration of subnet-level blocking if risk thresholds require it.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.