# INTELLIGENCE BRIEFING: IP 112.110.134.24
Date: 2026-07-29
Classification: Moderate Risk (Score: 40/100)
## EXECUTIVE SUMMARY
IP 112.110.134.24 is a legitimate mobile carrier infrastructure address assigned to Vodafone Idea Ltd. (VIL) in India. The IP presents a moderate risk profile (40) with no active threat indicators, no known malicious campaigns, and no blacklist associations. The address belongs to a mobile carrier network with low neighborhood abuse density.
## OWNERSHIP & INFRASTRUCTURE
- ASN: 45271 (Vodafone Idea Ltd.)
- Organization: Vodafone Idea Ltd. (VIL)
- Network Name: VIL-IN
- CIDR Block: 112.110.0.0/16
- RIR: APNIC
- Geolocation: India (Chhattisgarh, Ambikapur)
- Mobile Carrier: BSNL (MCC: 404, MNC: 72)
- Infrastructure Type: Mobile Carrier
- Connection Type: Mobile (LTE technology)
## THREAT ANALYSIS
Threat Indicators: None detected
- Blacklist Count: 0
- Known Campaigns: None
- Is Tor Exit: False
- Is Known Attacker: False
- Is Spam Source: False
- Pulsedive Risk: Not applicable
DNS Analysis:
- PTR Hostnames: None
- Forward Resolution: Not confirmed
- Hosted Domains: 0
- Email Authentication (SPF/DMARC): Not configured
Network Services:
- Open Ports: None detected
- TLS Certificates: None
- HTTP Title: None
- Service Purpose: Firewalled / No Services
## NETWORK NEIGHBORHOOD (112.110.134.0/24)
Abuse Density: 0 (Clean)
Classification: Clean
Total Siblings: 3
Active Siblings: 0
Threat Siblings: 0
Neighbor Analysis:
- 112.110.134.28: Risk Score 15, Authority Score 50
- 112.110.134.73: Risk Score N/A, Authority Score N/A
## OBSERVATION HISTORY
Fourteen signal observations recorded, with the most recent (2026-07-29 23:23:51 UTC) confirming:
- Stable ownership with zero changes
- Consistent geolocation inference for India
- Network role classification as mobile carrier
- No persistent malicious activity detected
Temporal analysis indicates no threat persistence days and zero threat observation count. The IP is not classified as persistently malicious.
## CONTROL PLANE DATA
- Origin ASN: 45271
- BGP Prefix: 112.110.134.0/24
- Route Stability: False
- Is Route Stable: False
- Is MoAS: False
- RPKI State: Not available
- IRR Consistency: Not available
- Route Changes (30d): 0
## RECOMMENDED SECURITY ACTIONS
Given the moderate risk score and confirmed mobile carrier infrastructure classification, the following firewall rules are recommended for defensive configurations:
iptables:
```
iptables -A INPUT -s 112.110.134.24 -j DROP
```
nftables:
```
nft add rule inet filter input ip saddr 112.110.134.24 drop
```
nginx:
```
deny 112.110.134.24;
```
Cloudflare WAF:
```json
{
"description": "Block 112.110.134.24 โ IPDebrief risk score 40",
"action": "block",
"filter": {
"expression": "ip.src eq 112.110.134.24"
}
}
```
AWS WAF:
```json
{
"Addresses": ["112.110.134.24/32"],
"Description": "IPDebrief risk 40"
}
```
## ANALYST NOTES
This IP belongs to Indian mobile carrier infrastructure and presents a moderate risk profile primarily due to its association with mobile networks, which are commonly exploited for various attack vectors. However, the absence of threat indicators, blacklist associations, and malicious campaigns suggests this is legitimate infrastructure. The low abuse density in the neighborhood (0) further supports benign classification.
Recommended Action: Monitor but no immediate blocking required unless additional threat intelligence emerges. The provided firewall rules are precautionary and should be evaluated in context with organizational security policies.
---
*Report generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Vodafone Idea Ltd. (VIL) |
| ASN | AS45271 |
| Network Name | VIL-IN |
| CIDR Block | 112.110.0.0/16 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-24 14:25:37 UTC |
| Last Seen | 2026-07-29 23:17:24 UTC |
| Profile Built | 2026-07-29 23:31:10 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 17 |
Full dossier details are available via our API.