223.181.96.218📋 Copy

# IP Intelligence Briefing: 223.181.96.218

## Executive Summary

IP address 223.181.96.218 is assigned to Bharti Airtel mobile infrastructure (ASN 24560, "Manaser" network). The IP registers a moderate risk score of 40 and is classified as mobile carrier infrastructure with no active open ports or services. The IP shows no active threat indicators, is not blacklisted, and demonstrates stable ownership with no malicious campaign associations.

## Technical Profile

## Threat Assessment

The IP shows no active threat indicators:

• Blacklist Status: 0 entries across threat feeds
• Known Attacker: No
• Tor Exit Node: No
• Known Campaigns: None identified
• Abuse Confidence: Not elevated

Control plane analysis indicates the IP is not a route origin and shows minimal operator classification. DNSBL listings total 8 lists with 2 active entries, though this appears to be a false positive given the mobile carrier classification.

## Network Neighborhood

The /24 subnet (223.181.96.0/24) contains 2 neighboring IPs:

• 223.181.96.93: Risk Score 40, Authority Score 50 (medium risk)
• 223.181.96.139: Risk Score 25, Authority Score 50 (low risk)

Overall neighborhood abuse density is 0.0, with no high-risk siblings in the immediate subnet. This suggests the risk associated with 223.181.96.218 is intrinsic to the mobile carrier classification rather than neighborhood contamination.

## Historical Observations

Thirteen signal observations recorded, all from recent timestamps (2026-07-29). Historical signals confirm:

• Consistent ownership attribution to Bharti Airtel
• Stable network classification (mobile carrier)
• No ownership changes detected
• No persistent malicious activity patterns
• Geolocation signals consistently indicate India (Punjab region)

The IP has shown no threat persistence or ownership volatility over the observation period.

## Relationship Graph

Three relationships identified, all referencing the "Manaser" network. This indicates the IP is properly associated with its parent network block with no anomalous interconnections to external entities.

## Recommended Actions

Based on the profile, the following actions are appropriate for SOC analysts:

1. Monitoring: Continue standard monitoring for mobile carrier IPs. No immediate blocking required.

2. Firewall Rules: No specific iptables/nftables rules recommended beyond standard carrier IP handling.

3. Traffic Analysis: Treat as legitimate mobile infrastructure traffic; investigate only if associated with anomalous connection patterns.

4. False Positive Handling: If flagged in security tools, review context for mobile carrier false positives.

## Conclusion

IP 223.181.96.218 is a legitimate Bharti Airtel mobile infrastructure address with moderate risk classification inherent to the mobile carrier type. No malicious activity, blacklisting, or campaign associations detected. The IP should be allowed through standard security controls with normal traffic inspection.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.