223.185.15.135📋 Copy

## IP INTELLIGENCE BRIEFING: 223.185.15.135/32

Classification: Low Risk / Mobile Network

Date: 2026-07-30

Executive Summary

IP 223.185.15.135 is a mobile network endpoint belonging to Bharti Airtel (ASN 24560) with a low-risk profile (score: 25). No active threat indicators detected. The IP appears to be firewalled with no open services and minimal network activity.

Ownership and Network Classification

• Organization: IRT-BHARTI-MO-IN (Bharti Airtel Ltd.)
• Network: 223.185.12.0/22 (MOHALI-UN)
• ASN: 24560 (APNIC)
• Connection Type: Mobile (LTE/5G via Airtel, MCC: 404, MNC: 10)
• Geolocation: India (Gurgaon/Haryana) per historical data; profile indicates US-NJ Newark (geolocation discrepancy noted)

Threat Assessment

• Risk Score: 25 / 100 (Low Risk)
• Blacklist Status: 1 DNSBL listing out of 8 total lists
• Known Threat Indicators: None
• Campaign Associations: None detected
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No

Network Behavior and Services

• Open Ports: None (Firewalled / No Services)
• DNS Resolution: No PTR hostnames; forward resolution failed
• HTTP/TLS: No certificates; no HTTP services observed
• Service Purpose: Firewalled / No Services
• Stability: Low (0/10 stability score)

Historical Observations

11 total observations recorded through 2026-07-30. Signals indicate:

• Consistent ownership with IRT-BHARTI-MO-IN
• Mobile network classification maintained
• No escalation in threat activity
• Geolocation signals show India-based mobile network

Neighborhood Analysis

• Subnet: 223.185.15.0/24
• Abuse Density: 0%
• Threat Siblings: 0
• Neighbor Risk Distribution: None (isolated endpoint)

Recommended Actions

1. Monitor: No immediate blocking recommended. Low-risk mobile endpoint.

2. Log: Record baseline for future anomaly detection.

3. Geo-Validate: Investigate US-NJ geolocation discrepancy; profile may indicate proxy or misattribution.

4. DNSBL Review: Review the single DNSBL listing to determine source and relevance.

Intelligence Notes

The IP exhibits characteristics of a mobile network endpoint with minimal observable footprint. The absence of open services and threat indicators suggests legitimate mobile device usage rather than malicious infrastructure. The geolocation discrepancy warrants monitoring but does not indicate active threat.

---

*Generated by IPDebrief Intelligence Platform | 2026-07-30*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.