117.214.55.104📋 Copy

# IP Intelligence Briefing: 117.214.55.104/32

Classification: Moderate Risk (Score: 40) | Last Updated: 2026-07-30

## Executive Summary

The IP address 117.214.55.104 is owned by BSNL (Bharat Sanchar Nigam Limited), a national telecommunications provider in India. The IP is associated with the BB-Multiplay network (ASN 9829) and is geolocated to Muzaffarpur, India. While classified as "Moderate Risk," the IP shows no active threat indicators, no open services, and zero blacklist entries. The neighborhood subnet (117.214.55.0/24) is classified as clean with no active threat siblings.

## Technical Profile

• ASN: 9829 (IRT-BSNL-IN)
• Organization: BB-Multiplay
• Geolocation: India (IN) — Muzaffarpur, BR
• CIDR Block: 117.215.0.0/18
• Timezone: Asia/Kolkata

## Threat Assessment

• Risk Score: 40/100 (Moderate Risk)
• Blacklist Count: 0
• DNSBL Listings: 2 of 8 total lists
• Operator Score: 0.1304 (Minimal)
• Threat Indicators: None detected
• Campaign Affiliation: None identified

The IP is not identified as a Tor exit node, proxy, VPN, CDN, or hosting provider. The service purpose is classified as "Firewalled / No Services" with no open ports or HTTP services detected.

## Historical Observation

The IP has 15 recorded observations as of 2026-07-30. No ownership changes or persistent malicious behavior have been observed. The IP shows threat persistence of 0 days and is not flagged as persistently malicious.

## Neighborhood Analysis

Subnet: 117.214.55.104/24

• Abuse Density: 0
• Classification: Clean
• Total Siblings: 1
• Active/Threat Siblings: 0

## Network Relationships

All relationship indicators point to BB-Multiplay network infrastructure. No associated hostnames, certificates, or correlated IPs were identified.

## Recommended Actions

Based on the risk profile, the following firewall rules are recommended:

## Analyst Notes

This IP presents a low-to-moderate risk profile typical of residential or multi-play services under a major Indian ISP. The absence of open ports and services suggests the IP may be inactive or properly secured. The 2 DNSBL listings warrant monitoring but do not indicate active malicious use. Recommended to block at the network edge, with monitoring for any behavioral changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.