106.215.177.247📋 Copy

# INTELLIGENCE BRIEFING: IP 106.215.177.247/32

Classification: Low Risk / Mobile Carrier Infrastructure

Date: 2026-07-29

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

Target IP 106.215.177.247/32 is a low-risk mobile carrier endpoint associated with Bharti Airtel's network infrastructure in India. The address is currently active with no observed malicious activity, threat indicators, or abuse patterns. Risk score is 25/100, classified as "Low Risk." No immediate security action required.

---

## OWNERSHIP & INFRASTRUCTURE

Note: Geolocation data indicates Atlanta, GA, US, but this is inconsistent with APNIC RIR registration. The IP is confirmed as mobile infrastructure (MCC: 404, MNC: 10) belonging to Indian carrier Bharti Airtel.

---

## THREAT ASSESSMENT

Risk Score: 25 (Low Risk)

Reputation: Low Risk / Clean

Threat Indicators: None

Blacklist Status: 0 entries

Known Campaigns: 0

Tor Exit Node: No

Spam Source: No

Known Attacker: No

Network Classification:

• Open Ports: 0
• Services: Firewalled / No Services
• Mobile Carrier: Yes (Airtel LTE/5G)
• Hosting/CDN/Proxy/VPN: No

---

## OBSERVATION HISTORY (14 Signals)

Recent activity shows standard network behavior with no escalation:

• 2026-07-29 13:24:16: Port scan activity detected (confidence: 70%)
• 2026-07-29 13:18:26: Network role classification (confidence: 30%)
• 2026-07-29 13:16:57: Subnet classification as "clean" (confidence: 40%)
• 2026-07-29 13:15:43: Ownership attribution to IRT-BHARTI-MO-IN (confidence: 90%)

Temporal Analysis: Zero threat observation count, no persistent malicious behavior detected. IP is not classified as persistently malicious.

---

## NETWORK NEIGHBORHOOD (/24)

Assessment: Neighborhood is clean with minimal abuse density. Single neighboring IP (106.215.177.134) shows no threat indicators.

---

## RELATIONSHIP GRAPH

Connected Entities: 4 relationships (all network-level associations)

• All relationships point to "NOIDA-DELHI-NCR" network block
• No hostname, organization, or certificate relationships detected

---

## SECURITY RECOMMENDATIONS

Current Risk: Low (25/100)

Recommended Actions: None

No specific firewall rules or mitigation actions recommended at this time. The IP is a legitimate mobile carrier endpoint with no observed malicious activity.

If Blocking is Required: Standard mobile carrier policy applies:

• Allow traffic from known mobile carrier ranges
• No blocking recommended for this IP
• Monitor for any behavioral changes

---

## CONCLUSION

IP 106.215.177.247 is a legitimate mobile carrier infrastructure address belonging to Bharti Airtel (India). The address shows standard operational behavior with no threat indicators, abuse patterns, or malicious activity. The geolocation inconsistency (US vs. India) is typical for mobile carrier networks using public DNS records.

Recommended SOC Action: Monitor. No immediate blocking or mitigation required.

---

*Intelligence generated by IPDebrief. Data accuracy depends on available signals and historical observations.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.