106.222.249.81📋 Copy

# THREAT INTELLIGENCE BRIEFING

Target IP: 106.222.249.81/32

Classification: Low Risk / Mobile Origin

Date: 2026-07-30

---

## EXECUTIVE SUMMARY

Target IP 106.222.249.81 is a mobile-originated address associated with Bharti Airtel's MANESAR-DELHI-NCR infrastructure. Risk scoring indicates low threat potential (score: 25/100) with no active malicious indicators. The IP terminates in Patna, Bihar, India on the Airtel LTE/5G mobile network.

---

## NETWORK OWNERSHIP & GEOLOCATION

• ASN: 24560 (IRT-BHARTI-MO-IN)
• Organization: MANESAR-DELHI-NCR
• Country: India (IN)
• Region/City: Bihar, Patna
• Registration: APNIC (allocated 2006-02-13)
• Mobile Carrier: Airtel (Bharti Airtel Ltd., MCC 404, MNC 10)

---

## THREAT ASSESSMENT

• Risk Score: 25 (Low Risk)
• Known Threats: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listings: 1 of 8 lists
• Campaign Correlation: None identified

---

## NETWORK CLASSIFICATION

• Infrastructure Type: Mobile Network
• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: No PTR records, no forward resolution
• BGP Prefix: 106.222.248.0/23
• AS Path: 34549 → 9498 → 24560
• RPKI State: Valid
• Route Stability: Minor fluctuations (1 change in 30 days)

---

## NEIGHBORHOOD ANALYSIS

Subnet: 106.222.249.0/24

• Total Siblings: 17
• Active Siblings: 15
• Abuse Density: 6.2%
• Threat Siblings: 0
• Risk Distribution: 10 low-risk, 5 medium-risk, 1 high-risk

The /24 subnet shows minimal abuse density. No threat indicators inherited from neighboring IPs.

---

## OBSERVATION HISTORY (Last 16 Signals)

Most recent signals captured 2026-07-30:

• Route origin validated by local VRP
• ASN age: 7,472 days (long-term stable allocation)
• BGP route: Stable with origin ASN 24560
• No ownership changes recorded

---

## RELATIONSHIP GRAPH

All relationship links point to MANESAR-DELHI-NCR network infrastructure. No cross-organization or cross-network associations detected.

---

## RECOMMENDED ACTIONS

Current Status: No immediate action required

Defensive Posture:

• No firewall rules generated due to low risk profile
• Monitor for escalation in threat signals
• Consider context-aware filtering if this IP appears in inbound traffic

SOC Analyst Notes:

• Mobile-originated traffic from India
• No services detected (firewalled)
• Neighborhood activity minimal
• If flagged for other reasons, investigate correlation with known threat campaigns

---

## CONCLUSION

IP 106.222.249.81 presents low threat risk. Characteristics align with legitimate mobile network infrastructure. No blocking or filtering recommended at this time. Monitor for changes in threat indicators or neighborhood abuse patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.