27.63.216.26📋 Copy

## IP Intelligence Briefing: 27.63.216.26

Date: Current Analysis

Risk Assessment: Moderate Risk (Score: 40/100)

Executive Summary

IP address 27.63.216.26 is a residential mobile endpoint associated with Bharti Airtel's Indian network infrastructure. The IP demonstrated moderate risk characteristics with firewalling services detected but no active open ports. Historical analysis indicates stable network registration with no persistent malicious activity.

Network Infrastructure

• ASN: 45609 (IRT-BHARTI-MO-IN)
• Organization: IRT-BHARTI-MO-IN (Bharti Airtel Ltd.)
• CIDR Block: 27.63.208.0/20
• RIR: APNIC
• NetName: KOLKATA-WEST-BENGAL
• Abuse Contact: ip.misuse@airtel.com
• Mobile Carrier: Airtel (MCC: 404, MNC: 10, Technology: LTE/5G)

Geolocation

• Country: India (IN)
• Region: Kerala
• Coordinates: 9.98°N, 76.27°E
• Timezone: Asia/Kolkata
• Geolocation Consensus: True (Single source, validated)

Network Services & Threat Indicators

• Service Status: Firewalled / No Services Detected
• Open Ports: None
• TLS Certificate: None
• DNS Records: No forward resolution
• PTR Hostnames: None
• Email Authentication: SPF and DMARC not configured
• Blacklist Count: 0 (DNSBL: 2 of 8 lists)
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False

Risk Breakdown

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Operator Score: 0.1304 (Label: Minimal)
• Abuse Confidence Score: Not calculated

Historical Analysis

12 observation signals recorded, most recent dated 2026-07-30:

• Network Registration: High confidence signals (0.90-0.95) confirming ASN and RIR registration
• Geolocation: Multiple signals with confidence ranging from 0.30 to 0.90, showing India-based positioning
• Threat Indicators: No persistent malicious activity detected
• Threat Persistence Days: 0
• Campaign Likelihood: None

Network Relationships

• 2 relationships identified, both classified as "Same Network" (KOLKATA-WEST-BENGAL)
• No cross-network correlations detected

Subnet Analysis (/24)

• Subnet: 27.63.216.26/24
• Neighbor Count: 0
• Abuse Density: 0
• High Risk Siblings: 0
• Medium Risk Siblings: 0
• Low Risk Siblings: 0

Control Plane Assessment

• Route Stability: False
• AS Path: Not available
• RPKI State: Not available
• IRR Consistency: Not available
• DNSSEC Valid: True
• MOAS Status: False
• Route Changes (30d): 0

Recommended Security Actions

Based on risk profile, the following defensive measures are recommended:

Firewall Rules:

• `iptables -A INPUT -s 27.63.216.26 -j DROP`
• `nft add rule inet filter input ip saddr 27.63.216.26 drop`
• `nginx: deny 27.63.216.26;`

Cloud/WAF Implementation:

• Cloudflare WAF: Block IP 27.63.216.26 (Expression: `ip.src eq 27.63.216.26`)
• AWS WAF: Add address 27.63.216.26/32 to block list

Analyst Notes

This IP represents a mobile residential endpoint within Bharti Airtel's infrastructure. The moderate risk score (40) is primarily driven by DNSBL listings and lack of route stability. No active threat indicators, open services, or malicious campaigns were observed. The IP is firewalled with no services exposed. SOC teams may consider blocking based on organizational policy thresholds, though the risk level warrants case-by-case evaluation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.