116.75.218.103📋 Copy

# INTELLIGENCE BRIEFING: 116.75.218.103

Classification: Moderate Risk - Residential Infrastructure

Date: 2026-06-22

Analyst: IPDebrief Intelligence Team

## EXECUTIVE SUMMARY

IP address 116.75.218.103 is a residential infrastructure endpoint operated by HATHWAY CABLE AND DATACOM LIMITED (ASN 17488) in Delhi, India. The address carries a risk score of 55 (Moderate Risk) with no active threat indicators. The IP exhibits residential network characteristics with standard service ports open. No evidence of persistent malicious behavior or known campaign participation detected.

## RISK PROFILE

## NETWORK CLASSIFICATION

• Provider Score: 0 (ISP/Provider)
• Authority Score: 0 (Not authoritative)
• Infrastructure Type: Residential
• Connection Type: Residential
• Service Purpose: Multi-Service Host
• Open Ports: 22/tcp (SSH), 8443/tcp (HTTPS-alt)
• DNS Classification: hathway.com domain with valid PTR record (218.75.116.103.hathway.com)

## THREAT INDICATORS

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None
• Threat Feeds: No active indicators
• DNSBL Status: Listed on 3 of 8 total lists

## GEOGRAPHIC CONTEXT

• Country: India (IN)
• Region: National Capital Territory of Delhi
• City: Delhi
• ASN Origin: 116.75.218.0/24 (17488)
• Geographic Consensus: True (1 source)

## OBSERVATION HISTORY

Total observations: 23

• Recent Activity: Multiple observations from June 2026
• Email Authentication: hathway.com SPF and DMARC records present and validated
• Operator Score Trend: Consistent minimal operator score (0.1304)
• Threat Persistence: 0 days (not persistently malicious)
• Ownership Changes: 0 (stable ownership)

## RELATIONSHIP GRAPH

• Total Relationships: 35
• Primary Associations: HATHWAY-NET network infrastructure
• Network Classification: Residential residential infrastructure cluster
• Cross-Reference: No correlated threat entities identified

## NEIGHBORHOOD ANALYSIS

• Subnet: 116.75.218.0/24
• Abuse Density: 0 (Clean)
• Classification: Mostly Clean
• Risk Distribution: High: 0, Medium: 0, Low: 0
• Active Siblings: 1 (threat sibling count: 1)

## RECOMMENDED ACTIONS

Based on the moderate risk profile and residential classification:

1. Monitor: Maintain ongoing monitoring due to DNSBL listings and unstable routing

2. Allow with Scrutiny: Standard residential traffic patterns expected; no blocking required

3. Geo-Fencing: Consider geographic filtering if business policy requires

4. Threat Intelligence: No immediate action required; no active threat indicators

## CONCLUSION

The IP address 116.75.218.103 represents legitimate residential infrastructure from HATHWAY's Delhi network. The moderate risk score reflects the residential nature of the address rather than malicious activity. No evidence of abuse, campaign participation, or persistent threat behavior detected. Routine monitoring recommended; no immediate defensive action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.