117.99.85.70📋 Copy

# IP Intelligence Briefing: 117.99.85.70/32

## Executive Summary

The IP address 117.99.85.70 presents a low-risk profile with a risk score of 25. The address is associated with a mobile device on the Airtel (Bharti Airtel Ltd.) network infrastructure in India. No active threat indicators or malicious campaigns were detected during analysis.

## Technical Profile

Network Infrastructure:

• ASN: 45609 (Rashim Kapoor)
• Network Name: GARVEBHAVIPALYA-BENGALURU-KA
• CIDR Block: 117.99.80.0/20
• RIR: APNIC
• Geolocation: India (IN), Uttar Pradesh, Lucknow (1500km accuracy radius)
• Classification: Mobile device on LTE/5G technology

Network Role:

• Connection Type: Mobile (isMobile: true)
• Service Status: Firewalled / No Services (no open ports detected)
• Not a CDN, Cloud, VPN, Proxy, or Tor exit node
• No reverse DNS PTR records registered
• No hosted domains or email authentication records (SPF/DMARC)

## Threat Assessment

Current Risk Profile:

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Campaigns: None detected
• Threat Feeds: No matches
• Tor Exit: False
• Known Attacker: False
• Spam Source: False

Control Plane Observations:

• Operator Score: 0.1304 (Minimal)
• DNSBL Listed: 1 out of 8 total lists
• Route Stability: Not stable
• BGP Prefix: 117.99.85.0/24
• RPKI State: Not determined

Observation History (14 observations):

• Most recent signal: 2026-07-30T08:02:03
• Classification consistency: "mostly_clean"
• Geolocation confidence: 52% (India coordinates: 20.59, 78.96)
• No persistent malicious activity detected
• Ownership changes: 0

## Neighborhood Analysis

Subnet: 117.99.85.0/24

• Abuse Density: 0.5 (moderate)
• Classification: Mostly clean
• Active Siblings: 1 of 2 total
• Threat Siblings: 1

Identified Neighbor:

• IP: 117.99.85.183
• Risk Score: 25
• Authority Score: 50
• Risk Classification: Low

## Security Recommendations

Actionable Firewall Rules:

Based on the low-risk profile and mobile device classification, no immediate blocking action is required. The IP shows no active threat indicators or malicious behavior patterns.

Monitoring Considerations:

• Continue monitoring for changes in network role classification
• Watch for any new open ports or service deployments
• Monitor subnet 117.99.85.0/24 for increased abuse density
• Review related neighbor 117.99.85.183 periodically for correlation

Threat Indicators:

No threat indicators were identified for this address during the intelligence gathering cycle.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.