106.219.170.88📋 Copy

# IP Intelligence Briefing: 106.219.170.88

## Executive Summary

IP address 106.219.170.88 presents moderate risk (score 40) with no active threat indicators. The IP is associated with mobile carrier infrastructure in New Delhi, India, and exhibits no malicious behavior in the observed network.

## Network Classification

• IP Address: 106.219.170.88/32
• ASN: 24560 (IRT-BHARTI-MO-IN)
• Organization: NOIDA-DELHI-NCR
• Geolocation: New Delhi, National Capital Territory of Delhi, India (IN)
• Carrier: Airtel (Bharti Airtel Ltd.), LTE/5G mobile network
• CIDR Block: 106.219.160.0/20

## Risk Assessment

• Overall Risk Score: 40 (Moderate Risk)
• DNSBL Status: Listed on 2 of 8 threat feeds
• Operator Score: 0.1304 (Minimal)
• Abuse Confidence: Not scored

## Threat Indicators

No active threat indicators detected:

• No known attacker attribution
• No spam source classification
• No Tor/VPN/proxy services detected
• No known campaign affiliations
• No blacklisted status beyond minimal DNSBL presence

## Network Behavior

• Service State: Firewalled / No Services
• Open Ports: None detected
• DNS Records: No PTR hostnames, no forward resolution
• Email Reputation: Not applicable (no domain associations)
• Mobile Network: Confirmed mobile carrier traffic (Airtel)

## Neighborhood Analysis

Subnet 106.219.170.0/24 classification:

• Abuse Density: 0.0 (clean)
• Classification: Clean
• Total Siblings: 2 IPs
• Active Threat Siblings: 0
• Neighboring IP: 106.219.170.24 (no risk data available)

## Observation History

Sixteen observations recorded, most recent from July 27, 2026:

• Geolocation: Confirmed India with 0.52 confidence (multi-signal inference)
• Ownership: 0 ownership changes detected
• Persistence: No persistent malicious behavior observed
• Validation: ICMP validation blocked during probe attempts

## Related Entities

• Network Relationships: NOIDA-DELHI-NCR (multiple instances)
• Organizations: None identified beyond carrier infrastructure
• Hostnames: None resolved
• Certificates: None associated

## SOC Recommendations

1. Monitoring: No immediate action required. The IP shows normal mobile carrier behavior with no malicious indicators.

2. Firewall Rules: Standard mobile carrier policies apply; no additional blocking recommended.

3. Threat Correlation: No correlations with known campaigns or attack infrastructure.

4. Continued Observation: Monitor for any service activation or behavioral changes.

## Conclusion

IP 106.219.170.88 is a legitimate mobile carrier endpoint with moderate risk classification due to mobile network characteristics. No defensive action required beyond standard carrier traffic handling.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.