117.219.90.209📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 117.219.90.209/32

Classification: Moderate Risk

Date: 2026-07-28

---

## EXECUTIVE SUMMARY

IP 117.219.90.209 is a firewalled infrastructure address assigned to BSNL (Indian Railways Telecommunication Company Limited) in the Gurugram, Haryana region. The address shows moderate risk characteristics (score: 55) primarily driven by DNS blacklist listings rather than active threat activity. No known attacker, spam source, or Tor exit node indicators detected.

## NETWORK OWNERSHIP

• ASN: 9829 (IRT-BSNL-IN)
• Organization: BSNL-GSM-NorthZone
• CIDR Block: 117.219.0.0/17
• RIR: APNIC
• Abuse Contact: abuse1@bsnl.co.in
• Geolocation: Gurugram, Haryana, India (IN)

## THREAT ASSESSMENT

Risk Score: 55 (Moderate Risk)

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None

DNS Blacklist Status:

• Listed: 3 of 8 total blacklists
• Operator Score: 0.1304 (Minimal)

## NETWORK BEHAVIOR

• Services: Firewalled / No Services Detected
• Open Ports: None
• DNS Resolution: No PTR records; forward resolution failed
• Route Stability: Unstable routing observed
• BGP Prefix: 117.219.80.0/20

## TEMPORAL ANALYSIS

• Threat Persistence: No persistent malicious activity detected
• Observation Count: 0 threat observations
• Ownership Changes: 0 changes recorded
• Historical Observations: 14 signals captured (most recent: 2026-07-28)

## NEIGHBORHOOD ANALYSIS

• Subnet: 117.219.90.209/24
• Abuse Density: 0% (Clean classification)
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor Count: 0 (isolated subnet)

## RELATIONSHIP GRAPH

• Same Network Associations: BSNL-GSM-NorthZone (2 relationships)
• No external entity relationships (hostnames, certificates, organizations) detected

## RECOMMENDED ACTIONS

1. Monitoring: Continue passive monitoring; no immediate blocking required

2. Firewall Policy: Allow outbound traffic only; inbound connections not expected

3. Threat Hunting: Monitor for lateral movement if this IP appears in logs

4. Block Lists: Review the 3 active DNS blacklist sources for context

## ANALYST NOTES

This IP represents standard telecom infrastructure from BSNL's GSM North Zone network. The moderate risk score derives primarily from historical DNS blacklist entries rather than active malicious behavior. The clean neighborhood profile and lack of threat siblings suggest this is a legitimate infrastructure address. No immediate threat response recommended; maintain monitoring posture.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.