117.99.80.239📋 Copy

# IP Intelligence Briefing: 117.99.80.239

## Executive Summary

IP address 117.99.80.239 presents a low risk profile (Risk Score: 15) with no active threat indicators. The address is associated with mobile carrier Airtel (Bharti Airtel Ltd., India) and shows no evidence of malicious activity. However, routing instability and geolocation inconsistencies warrant continued monitoring.

## Profile Overview

• IP Address: 117.99.80.239/32
• Risk Score: 15 (Low Risk)
• ASN: 45609 (Rashim Kapoor)
• Organization: GARVEBHAVIPALYA-BENGALURU-KA
• CIDR Block: 117.99.80.0/20
• Country: India (IN)
• Region: Uttar Pradesh
• City: Lucknow (primary geolocation)
• Connection Type: Mobile (Airtel LTE/5G)
• Network Classification: Firewalled / No Services

## Threat Indicators

• Blacklist Status: Listed on 1 of 8 DNSBLs
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Active Campaigns: None detected
• Abuse Confidence Score: Not assigned

## Network Behavior

• Open Ports: None detected
• Services: No active services
• DNS Resolution: No forward resolution
• PTR Hostnames: None
• HTTP/HTTPS: No web services detected

## Neighborhood Analysis

The /24 subnet (117.99.80.0/24) shows clean classification with minimal abuse activity:

• Abuse Density: 0
• Total Sibling IPs: 2
• Active Siblings: 2
• Threat Siblings: 0
• Notable Neighbor: 117.99.80.243 (Risk Score: 25, Authority Score: 50)

## Observation History

Analysis of 17 observations reveals:

• Current Classification: Clean
• Geolocation Consistency: Inconsistent (primary: India, secondary signals indicate US transit routing)
• Route Stability: Route changes detected within 30-day window
• Threat Persistence: No persistent malicious activity observed
• Recent Signals: Stable reputation with no escalation in risk profile

## Control Plane Data

• Origin ASN: 45609
• BGP Prefix: 117.99.80.0/24
• Route Changes (30d): 0
• Route Stability: False
• DNSSEC: Valid
• IRRC Consistency: Not evaluated

## Relationships

• Network Association: GARVEBHAVIPALYA-BENGALURU-KA (primary network)
• No additional entity relationships (hostnames, certificates, organizations)

## Intelligence Assessment

This IP represents a legitimate mobile endpoint with no current threat activity. The low risk score, combined with clean neighborhood metrics and absence of threat indicators, suggests benign usage. However, the following factors warrant attention:

1. Routing Instability: Route changes detected suggest dynamic infrastructure changes

2. Geolocation Inconsistencies: Multiple geo-sources indicate conflicting location data (India vs. US transit)

3. Single DNSBL Listing: Minor negative signal requiring context

4. Elevated Sibling Risk: Neighbor IP 117.99.80.243 shows elevated risk (25)

## Recommendations

• Monitor: Continue monitoring for risk score escalation
• Allow: No immediate blocking required based on current profile
• Correlate: Investigate relationship with elevated-risk neighbor 117.99.80.243
• Verify: Confirm geolocation consistency through additional routing analysis

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.