223.237.152.58📋 Copy

IP Intelligence Briefing: 223.237.152.58

Date: 2026-06-12

---

**1. Core Profile**

• Risk Score: Low Risk (0/100)
• Ownership:

- ASN: 45609 (BHARTI-MOBILITY-AS-AP)

- Organization: Bharti Airtel Ltd. (India)

- Subnet: 223.237.128.0/19

• Geolocation:

- Country: United States (flagged as plausible but inconsistent with ASN origin)

- City: Newark, NJ

• Threat Indicators:

- No active malicious campaigns, spam, or known attacker associations.

- No DNSBL listings or TLS certificate anomalies.

• Network Role:

- Firewalled / No Services (no open ports or HTTP/TLS services detected).

- Likely infrastructure IP (e.g., internal network, CDN, or carrier backbone).

---

**2. Observation History**

• Recent Activity (Last 30 Days):

- Threat Feed Signals: 12 observations, including:

- 1 high-severity listing (confidence: 85%) with unknown source.

- DNSSEC validation confirmed.

- ASN allocation details (2010-09-14) from Team-Cymru.

- No confirmed malicious activity (minimal risk score).

- Geolocation Discrepancy: IP flagged as "plausible" in the US, but ASN originates from India. Potential misattribution or network routing anomaly.

---

**3. Relationships**

• Linked Entities:

- Same network: "WHITEFIELD-BANGLORE-KK" (likely a sibling subnet).

- No direct links to organizations, domains, or certificates.

• Behavioral Notes:

- No email authentication records (SPF/DKIM) or HTTP server banners.

- No WAF violations or honeypot hits detected.

---

**4. Neighborhood Analysis**

• Subnet: 223.237.152.58/24
• Neighbor Data:

- Total Siblings: 0 (no neighboring IPs identified).

- Abuse Density: 0% (no risky siblings or compromised hosts).

• Network Context:

- Subnet appears isolated or under strict segmentation.

---

**5. Recommendations**

• Monitoring:

- Validate geolocation discrepancy (potential routing misattribution).

- Monitor for unexpected DNS changes or subnet activity.

• Mitigation:

- No immediate firewall rules or blocking required based on current data.

- Consider correlating with BHARTI-MOBILITY-AS-AP's network behavior if anomalies arise.

Conclusion: This IP appears to be a low-risk infrastructure asset with no confirmed malicious activity. However, the geolocation inconsistency and sparse neighbor data warrant further investigation into potential routing anomalies or network misconfigurations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.