223.233.86.68📋 Copy

# IP Intelligence Briefing: 223.233.86.68/32

Classification: Moderate Risk (Score: 40)

Report Date: Current Analysis

Analysis Scope: Full Profile, Historical Signals, Relationships, Neighborhood Data

---

## 1. Ownership & Network Context

The IP address 223.233.86.68 is assigned to Network Administrator for ABTS DEL under ASN 24560. The address falls within the ABTS-DSL-DEL CIDR block (223.233.64.0/18), allocated to the APNIC RIR. Geolocation data consistently places the IP in Pune, Maharashtra, India, with a 1,500 km accuracy radius.

Key Attributes:

• Provider: Bharti Airtel Ltd.
• Connection Type: Mobile (LTE/5G) via Airtel broadband
• Classification: Firewalled / No Services
• Open Ports: None detected

---

## 2. Threat Intelligence Summary

Current Risk Profile: The IP presents a Moderate Risk score of 40 with no active threat indicators in the current profile.

Threat Indicators:

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Status: Listed on 2 out of 8 total DNS blacklists (severity: high)

Historical Signals: 16 observations recorded, with DNS blacklist detections noted in recent activity. Abuse contact email: `dsltac2north.unoc@airtel.com`.

Campaign Correlation: No known threat campaign matches or banner correlations identified.

---

## 3. Neighborhood Analysis

The /24 subnet (223.233.86.0/24) demonstrates clean classification with zero abuse density.

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 3

Sibling IPs: Three neighbors identified (223.233.86.112, 223.233.86.179, 223.233.86.234) all show risk scores of 0 with authority scores of 50, indicating stable infrastructure.

---

## 4. Relationships & Infrastructure

DNS Resolution: The IP resolves to hostname `abts-north-dynamic-68.86.233.223.airtelbroadband.in`. Forward confirmation is pending.

Network Relationships:

• Same Network: ABTS-DSL-DEL
• DNS Associations: Dynamic Airtel broadband hostname (appears twice in relationship graph)

Control Plane: Route stability is flagged as false with zero route changes in the last 30 days. Two DNS blacklist listings detected across 8 total lists.

---

## 5. Recommended Security Actions

Firewall Recommendations:

---

## 6. Analyst Assessment

The IP 223.233.86.68 represents a moderate-risk residential/mobile broadband address with no active malicious indicators. While the current profile shows no known attacker behavior or campaign association, the presence of DNS blacklist listings warrants monitoring. The IP is part of Airtel's dynamic mobile broadband infrastructure, which typically rotates assignments for residential subscribers.

Recommendation: Block at perimeter firewall based on DNS blacklist associations and moderate risk score. Monitor for any changes in threat profile or neighborhood activity. No immediate threat escalation indicators present.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.