223.181.65.208
# IP Intelligence Briefing: 223.181.65.208/32
Classification: Low Risk | Risk Score: 25 | Status: MONITOR
Ownership & Network
IP 223.181.65.208 belongs to Bharti Airtel (ASN 24560, IRT-BHARTI-MO-IN) within the Manaser network block (223.181.64.0/21). The address is classified as mobile carrier traffic from Bharti Airtel Ltd. (MCC 404, MNC 10, India). Registration is under APNIC.
Geolocation Discrepancy
Profile data indicates Atlanta, US with geo consensus false and geo plausible null. However, mobile carrier metadata confirms India (IN), suggesting potential geolocation data conflicts that warrant validation.
Threat Assessment
Risk score of 25 (Low Risk) with no active threat indicators. The IP is not flagged as a Tor exit node, known attacker, or spam source. However, DNSBL listings are present: 1 listing out of 8 total lists with maximum severity rated high. No known campaigns or correlated IPs detected.
Network Activity
No open ports or active services detected. Service classification shows "Firewalled / No Services." Mobile carrier classification is confirmed. No email authentication records (SPF, DMARC) associated.
Neighborhood Analysis
Subnet 223.181.65.0/24 contains 1 sibling IP (223.181.65.97) with risk score 25 and authority score 50. Subnet abuse density is 0. No high or medium risk neighbors detected.
Historical Observations
Twelve observations recorded. Recent data shows consistent ASN/owner information, DNSSEC validation (valid), and network scanning activity. Mobile carrier metadata persisted across observations. No persistent malicious threat behavior observed.
Recommended Actions
No specific firewall rules generated. Due to low risk profile and mobile carrier classification, allow with monitoring. Validate geolocation discrepancies through additional telemetry. Monitor DNSBL listing status.
Key Indicators for SOC
- Mobile carrier origin (Bharti Airtel, India)
- DNSBL: 1/8 lists, high severity
- No active services
- Geo validation needed (US vs IN discrepancy)
- Authority score 50 on sibling IP suggests some reputation weight in /24
Conclusion
This IP represents mobile carrier infrastructure with low-risk characteristics. Primary concern is geolocation validation and DNSBL monitoring. No immediate blocking recommended; maintain observation for traffic pattern anomalies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-BHARTI-MO-IN |
| ASN | AS24560 |
| Network Name | Manaser |
| CIDR Block | 223.181.64.0/21 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 4% | 1 | 1 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-21 06:47:20 UTC |
| Last Seen | 2026-07-29 07:26:19 UTC |
| Profile Built | 2026-07-29 07:35:31 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 15 |
Full dossier details are available via our API.