117.205.94.77📋 Copy

## IP Intelligence Briefing: 117.205.94.77

Classification: Low Risk | Assessment Date: 2026-07-30

Prepared For: SOC Operations Team

---

Executive Summary

The target IP 117.205.94.77 was assessed as low risk during the observation window. The address is associated with Indian telecommunications infrastructure (BSNL) and shows no evidence of active malicious activity. No immediate blocking action is recommended.

---

Ownership & Infrastructure

• ASN: 9829
• Organization: IRT-BSNL-IN (Bharat Sanchar Nigam Limited)
• BGP Prefix: 117.205.80.0/20
• Geolocation: India (IN) – Barakhamba Road, New Delhi
• RIR: APNIC

The IP is part of BSNL's multi-play broadband infrastructure (BB-Multiplay network). The address falls within the 117.205.128.0/17 allocation block.

---

Network Classification

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: Not present
• Not a known proxy, VPN, CDN, Tor exit node, or hosting provider

The absence of open services suggests this endpoint is either internal-facing, properly secured, or not actively accepting connections.

---

Threat Assessment

• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

No threat indicators were identified in the observation window. The IP did not appear on any threat feeds or maintain a reputation as a malicious source.

---

Observed Behavior

• Total Incidents: 0
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Is Active Attacker: No
• Auto-Banned: No

The IP showed no behavioral anomalies during the assessment period.

---

Network Neighborhood Analysis

• Subnet: 117.205.94.77/24
• Abuse Density: 0
• Threat Siblings: 0
• Active Siblings: 0

The /24 subnet contains no other observed IPs, indicating either limited subnet activity or incomplete neighbor discovery.

---

Routing & Control Plane

• Route Stability: Unstable (route changes observed in 30-day window)
• RPKI State: Not determined
• Bogon Classification: Not applicable
• Anycast: Not detected

While the IP's routing appears relatively stable, the control plane flagged route changes within the 30-day observation window.

---

Historical Observations

Ten signals were recorded during the observation window. Key observations include:

• 2026-07-30 16:08:55 UTC: Geolocation inference placed the IP in India (90% confidence)
• 2026-07-30 16:08:52 UTC: ASN 9829 ownership confirmed via RIR registry data
• 2026-07-30 16:08:45 UTC: DNSSEC validation signals received

---

Recommended Actions

No immediate security actions are recommended. The IP demonstrates a low-risk profile with no active threat indicators. SOC analysts may:

• Monitor for any changes in reputation scores
• Review incoming traffic patterns if the IP appears in logs
• No firewall rules required at this time

---

Conclusion

IP 117.205.94.77 is classified as low risk. The address is legitimately associated with BSNL's Indian telecommunications infrastructure and shows no evidence of malicious activity. Continued monitoring is recommended but no immediate defensive action is warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.