## IP Threat Intelligence Briefing: 115.246.196.90/32
Classification: Mobile Infrastructure โข Risk Level: Low
Date: 2026-07-29
Analyst: IPDebrief Intelligence Team
---
Executive Summary
IP address 115.246.196.90 is identified as a mobile carrier infrastructure endpoint operated by Reliance Jio Infocomm Ltd. in Guntur, Andhra Pradesh, India. The IP exhibits no threat indicators, with zero blacklist presence and no observed malicious activity. Network analysis confirms the endpoint is firewalled with no open services, consistent with mobile network infrastructure.
---
Profile Details
Network Ownership:
- ASN: 55836
- Organization: IRT-RELIANCEJIO-IN
- Network Name: RELIANCEJIO-IN
- CIDR Block: 115.240.0.0/13
- RIR: APNIC
- Abuse Contact: Available via RDAP
Geolocation:
- Country: India (IN)
- Region: Andhra Pradesh
- City: Guntur
- Accuracy Radius: 1500 km
Connection Type:
- Mobile Carrier: Jio (Reliance Jio Infocomm Ltd.)
- Technology: LTE/5G
- Mobile Carrier MCC/MNC: 405/872
---
Risk Assessment
Risk Scores:
- Overall Risk Score: 0
- Provider Score: 0
- Authority Score: 0
- Operator Score: 0.1304 (Minimal)
Threat Indicators:
- Blacklist Count: 0
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Threat Persistence Days: 0
- Persistently Malicious: No
Network Services:
- Open Ports: None detected
- Service Status: Firewalled / No Services
- TLS Certificate: None
- Hosted Domains: 0
---
Control Plane Analysis
BGP Routing:
- Origin ASN: 55836
- BGP Prefix: 115.240.0.0/13
- Route Stability: False
- Route Changes (30d): 0
DNS Security:
- DNSSEC Valid: Yes
- DNSBL Listed Count: 0
- DNSBL Total Lists: 8
---
Observation History
Twelve observations recorded as of 2026-07-29. Analysis confirms:
- No ownership changes detected
- Zero threat observation count
- No persistent malicious activity
- Confidence levels ranged from 0.30 to 0.85 across signal types
---
Network Relationships
Four relationships detected, all classified as "Same Network" to RELIANCEJIO-IN. No external relationships identified:
- No associated hostnames
- No organizational links beyond network
- No certificate associations
- No correlated campaign data
---
Neighborhood Analysis
Subnet: 115.246.196.90/24
- Neighbor Count: 0
- Abuse Density: 0
- Risk Distribution: High (0), Medium (0), Low (0)
No neighboring IPs are currently monitored within this /24 subnet.
---
Recommended Actions
Firewall Rules:
- No blocking required. IP is classified as legitimate mobile infrastructure.
- If traffic from this IP is observed, allow pass-through with standard mobile carrier policies.
Monitoring Recommendations:
- Continue standard monitoring for mobile carrier traffic patterns
- No additional threat hunting actions required
- No IP reputation changes expected based on historical data
---
Intelligence Assessment
This endpoint represents standard mobile network infrastructure with no threat indicators. The absence of open services, combined with the mobile carrier classification and zero threat observations, indicates this IP is not being leveraged for malicious activities. No firewall intervention is recommended.
Status: CLEAR โ Legitimate Mobile Infrastructure
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | IRT-RELIANCEJIO-IN |
| ASN | AS55836 |
| Network Name | RELIANCEJIO-IN |
| CIDR Block | 115.240.0.0/13 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-22 07:15:08 UTC |
| Last Seen | 2026-08-02 04:44:56 UTC |
| Profile Built | 2026-07-29 12:32:45 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 16 |
Full dossier details are available via our API.