117.250.107.180📋 Copy

IP Intelligence Briefing: 117.250.107.180

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Ownership: Registered to BSNLNET (AS9829, APNIC) – Indian telecom provider.
• Geolocation: Jharkhand, India (city: Dhanbad, 1500km accuracy radius).
• Network Role: Multi-service host (HTTP/SSH services, no CDN/VPN/Cloud flags).
• Threat Indicators: No malicious activity observed; no known campaigns, blacklists, or abuse confidence scores.

---

**2. Observations**

• Latest Activity:

- HTTP service (port 80) with 200 status code, no malicious banners.

- SSH service (port 22) using Dropbear, with a specific banner string.

• Historical Data:

- 21 observations since June 2026, showing consistent HTTP/SSH traffic.

- No spikes in threat signals or DNS anomalies.

• Control Plane:

- BGP prefix: `117.250.96.0/20` (route stability: unstable).

- DNSSEC valid, but 5/8 DNSBL lists flagged the IP (low confidence).

---

**3. Relationships**

• Network Connections:

- Linked to BSNLNET (same network).

- No direct relationships to other IPs, organizations, or certificates.

• Subnet: Part of `117.250.107.180/24`, but no neighboring IPs detected.

---

**4. Neighborhood Analysis**

• Subnet Abuse Density: 1 (mostly clean, minimal inherited risk).
• Neighbors: No active sibling IPs in the /24 subnet.

---

**5. Actionable Insights**

• Monitor SSH Service: The Dropbear SSH banner may indicate a specific configuration or potential misconfiguration.
• Verify DNSSEC: Despite DNSSEC validity, the IP is listed on 5/8 DNSBLs. Investigate if this is a false positive or misconfigured resolver.
• Network Segmentation: The lack of neighboring IPs in the subnet may suggest isolated infrastructure or potential misclassification.
• Threat Context: While the IP shows no direct malicious activity, its high risk score and BSNL ownership warrant further investigation into potential misuse of enterprise resources.

---

Conclusion: The IP is registered to a legitimate telecom provider but exhibits high risk due to network instability and DNSBL listings. No immediate threat detected, but ongoing monitoring for unusual traffic patterns is recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.