117.205.174.197📋 Copy

# INTELLIGENCE BRIEFING: 117.205.174.197/32

Classification: LOW RISK | Report Date: Current | Risk Score: 25/100

## Executive Summary

IP 117.205.174.197 presents a low-risk profile with no active threat indicators. The address operates in a clean network environment with minimal operational signals. No immediate defensive action required, though routine monitoring recommended.

## Network Attribution

• Organization: IRT-BSNL-IN (BB-Multiplay)
• ASN: 9829
• CIDR Block: 117.205.128.0/17
• Geolocation: Chicago, IL, US (Note: ASN registration indicates India; geolocation discrepancy warrants periodic validation)
• Registration: APNIC

## Operational State

• Service Status: Firewalled / No Services Detected
• Open Ports: None
• TLS/HTTP: No active services
• DNS Resolution: No PTR records, no forward resolution confirmed
• Email Reputation: No SPF/DMARC configured

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not applicable
• Blacklist Presence: 1/8 DNSBL lists (minimal impact)
• Operator Score: 0.1304 (Minimal)
• Threat Indicators: None
• Known Campaigns: None
• Tor Exit Node: No
• Hosting/Proxy/VPN: No

## Neighborhood Analysis

• Subnet: 117.205.174.0/24
• Abuse Density: 0.0 (Clean)
• Active Siblings: 2/2
• Threat Siblings: 0
• Neighbor IP: 117.205.174.25 (Risk Score: 25)

## Historical Observations

• Total Signals: 13 observations
• Threat Persistence: 0 days
• Ownership Changes: 0
• Recent Trend: Consistent clean classification with stable risk parameters
• No Persistent Malicious Activity Detected

## Control Plane

• BGP Prefix: 117.205.160.0/20
• Route Stability: Flagged as unstable (minor concern)
• DNSSEC: Valid
• IRR Consistency: N/A
• Route Changes (30d): 0

## Defensive Recommendations

No immediate firewall rules or blocking actions recommended due to low risk profile. Standard logging and monitoring practices applicable.

Analyst Notes:

• Route stability flag warrants periodic BGP monitoring
• Geolocation discrepancy (India ASN vs US location) should be validated through additional sources
• Low-risk profile suitable for allowlist consideration if traffic is verified legitimate
• No evidence of malicious activity or abuse patterns

---

*Intelligence generated by IPDebrief threat analytics platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.