117.202.213.90📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 117.202.213.90/32

Classification: Low Risk Infrastructure IP

Date: Current Analysis Cycle

---

## EXECUTIVE SUMMARY

IP address 117.202.213.90 is a low-risk infrastructure endpoint belonging to BSNL's GSM South Zone network. The address shows no active threat indicators, no open services, and minimal neighborhood abuse density. SOC analysts may treat this IP as benign with standard monitoring practices.

---

## OWNERSHIP & GEOLOCATION

• Organization: IRT-BSNL-IN (Indian Railways/Telecom BSNL)
• ASN: 9829
• Network: BSNL-GSM-SouthZone (117.202.208.0/20)
• Country: India (IN)
• Region: Andhra Pradesh
• City: Visakhapatnam
• Geolocation Confidence: Moderate (52%)
• RIR: APNIC

---

## THREAT INDICATORS

• Overall Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Likelihood: None

---

## NETWORK PROFILE

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• DNS PTR Records: None
• Forward Resolution: Not confirmed

---

## TEMPORAL ANALYSIS

• Ownership Stability: No changes observed
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: False
• Observations Recorded: 13 signals (most recent: 2026-07-30 16:10:01 UTC)

---

## NEIGHBORHOOD CONTEXT (117.202.213.0/24)

• Abuse Density: 0%
• Total Sibling IPs: 2
• Risk Distribution: 2 Low Risk, 0 Medium/High Risk
• Notable Neighbors:

- 117.202.213.10: Risk Score 0, Authority Score 50

- 117.202.213.138: Risk Score 25, Authority Score 50

---

## RELATIONSHIPS

• Network Affiliation: BSNL-GSM-SouthZone (confirmed)
• Related Entities: None beyond network-level associations

---

## SOC ACTION RECOMMENDATIONS

Action: Monitor as benign infrastructure

• No immediate firewall blocking required
• Standard logging and monitoring recommended
• No threat intelligence alerts triggered

Firewall Rules: None required at this time

• IP does not match any active threat criteria
• Consider allowing with standard logging if traffic is observed

---

ANALYST NOTES: This IP represents a legitimate BSNL telecommunications infrastructure endpoint with no observed malicious activity. The neighborhood shows minimal abuse density, and the IP has been observed consistently without threat persistence patterns. No escalation required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.