171.48.104.169📋 Copy

# IP Intelligence Briefing: 171.48.104.169/32

## Executive Summary

IP 171.48.104.169 is associated with Bharti Airtel Ltd. (ASN 45609), a major Indian mobile carrier. The IP presents as a low-risk endpoint with a reputation score of 25/100. The address is classified as mobile infrastructure with no open services detected.

## Network Ownership and Infrastructure

The IP address belongs to the Mohali network block (171.48.104.0/21) under ASN 45609 (IRT-BHARTI-MO-IN). The infrastructure is registered with APNIC and attributed to Bharti Airtel Ltd., a prominent telecommunications carrier operating in India. Geolocation data indicates the IP's operational footprint in Bengaluru, Karnataka, with a consensus accuracy radius of 1,500 km.

## Threat Indicators

No active threat indicators were identified during analysis. The IP is not classified as a Tor exit node, known attacker, or spam source. Blacklist enumeration returned zero entries across monitored threat feeds. DNSBL analysis showed 1 listing out of 8 total lists reviewed.

## Network Classification

The IP is classified as mobile infrastructure with carrier identification for Airtel (MCC: 404, MNC: 10). Service scanning revealed no open ports and no HTTP/HTTPS services. The address operates in a firewalled state with no active service banners detected.

## Observation History

Twelve signal observations were recorded, with the most recent activity timestamped 2026-07-30. Historical signals include:

• DNSSEC validation confirmed
• ASN attribution to BHARTI-MOBILITY-AS-AP
• Geolocation inference with 52% confidence (IN country code)
• No persistent malicious activity observed
• Zero threat observation days recorded

## Neighborhood Analysis

The /24 subnet (171.48.104.169/24) showed zero neighboring IPs detected. Abuse density metrics returned 0, with no sibling IPs flagged for high, medium, or low risk classifications.

## Relationship Graph

Three relationships were identified, all pointing to the Mohali network designation. No additional organizational, hostname, or certificate relationships were discovered.

## Recommended Actions

No specific firewall rules or mitigation recommendations were generated. The low-risk classification (25/100) combined with mobile carrier infrastructure classification suggests standard monitoring procedures are appropriate.

## Intelligence Assessment

This IP represents legitimate mobile carrier infrastructure with no malicious indicators. The low-risk profile and absence of threat indicators support continued observation rather than immediate blocking. SOC analysts should treat this as benign mobile traffic from Indian carrier operations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.