223.181.165.234📋 Copy

# Threat Intelligence Briefing: 223.181.165.234/32

## Executive Summary

IP address 223.181.165.234 is classified as low risk (risk score: 25) with no active threat indicators. The address operates as a mobile network endpoint (Airtel/LTE-5G) with no open services, no blacklist presence, and a clean subnet classification. No immediate blocking or alerting actions are recommended.

## Technical Profile

Ownership & Infrastructure:

• ASN: 24560 (Rahul Jain)
• Netname: BHARTI-MO-IN
• RIR: APNIC
• CIDR Block: 223.176.0.0/12
• Geolocation: Uttar Pradesh, Lucknow, India (IN)
• Mobile Carrier: Bharti Airtel Ltd. (MCC: 404, MNC: 10)
• Connection Type: LTE/5G mobile

Network Classification:

• Service Status: Firewalled / No Services
• Open Ports: None
• DNS: No PTR records, no reverse resolution
• TLS/HTTP: No certificates, no HTTP services detected

Threat Indicators:

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Control Plane DNSBL: 1 of 8 lists (minimal operator score: 0.1304)

## Threat Assessment

The IP address shows minimal operational characteristics typical of mobile network infrastructure:

Campaign Correlation:

• Cert Matches: 0
• Correlated IPs: 0
• Likelihood of Campaign: None observed

## Historical Analysis

Observation Timeline: 14 signals captured as of 2026-07-29

Key Historical Signals:

• 2026-07-29 22:37:19 UTC: Geolocation inference (IN, Uttar Pradesh/Lucknow region)
• 2026-07-29 22:36:04 UTC: Ownership attribution (Rahul Jain, Bharti Airtel)
• 2026-07-29 22:38:38 UTC: Network role classification (mobile, no proxy/Tor/VPN)
• 2026-07-29 22:39:31 UTC: Subnet classification (clean, abuse density: 0)

Temporal Indicators:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Route Stability: False (BGP prefix changes detected)

## Network Context

Subnet Analysis (223.181.165.0/24):

• Abuse Density: 0.0 (clean)
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Classification: Clean

Control Plane:

• Origin ASN: 24560
• BGP Prefix: 223.181.160.0/20
• RPKI State: Not evaluated
• IRR Consistency: Not evaluated
• Route Changes (30d): 0

Relationship Graph:

• 4 relationships identified (all Same Network: BHARTI-MO-IN)
• No external organization, hostname, or certificate relationships detected

## Recommended Actions

Based on the current risk profile and historical analysis:

Firewall/Security Actions:

• No immediate blocking or rate-limiting recommended
• No specific firewall rules generated (risk score < 50 threshold)

Monitoring Recommendations:

• Continue passive monitoring for any service emergence or service purpose changes
• Monitor for any route stability changes affecting the BGP prefix
• No alerting thresholds required at this time

Investigation Notes:

• Mobile network endpoint with no persistent services
• Low-risk classification with zero threat indicators
• No correlation to known campaigns or malicious infrastructure
• Standard mobile carrier traffic pattern

---

Classification: Low Risk

Last Updated: 2026-07-29

Data Sources: 14 observations, IPDebrief intelligence platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.