59.145.183.174📋 Copy

# IP Intelligence Briefing: 59.145.183.174/32

Classification: Low Risk | Provider: Bharti Airtel Limited (ASN 9498) | Network: BHARTI-IN (59.144.0.0/15) | Country: India (IN)

---

## Executive Summary

IP 59.145.183.174 is a low-risk mobile carrier endpoint associated with Bharti Airtel's Indian infrastructure. The address demonstrates minimal threat indicators with a risk score of 0 and no blacklist listings. The IP is classified as a mobile network endpoint with firewalled/no active services.

---

## Technical Profile

Network Classification:

• Mobile Carrier: Airtel (LTE/5G technology)
• Network Type: Mobile/Residential endpoint
• Services: Firewalled / No active services detected
• Open Ports: None identified
• TLS Certificates: None

Geolocation:

• Country: India (IN)
• Geo Confidence: 0.52 (multi-signal inference)
• Inferred Location: ~20.59°N, 78.96°E

DNS/Resolution:

• PTR Hostnames: None
• Forward Resolution: Not confirmed
• DNSSEC: Valid
• Email Authentication: SPF/DMARC not configured

---

## Threat Assessment

Risk Indicators:

• Risk Score: 0/100 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No

Campaign Correlation:

• Known Campaigns: None
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

Threat Persistence:

• Threat Observation Count: 1
• Persistently Malicious: No
• Ownership Changes: 0

---

## Network Neighborhood Analysis

Subnet: 59.145.183.0/24

• Abuse Density: 0 (mostly clean)
• Inherited Risk: 5
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 2

Neighbor Alert:

• 59.145.183.50 identified with risk score 25 and authority score 50
• This neighbor may warrant separate investigation

---

## Observation History (19 signals)

Recent activity captured 2026-07-27 includes:

• SSH service detected (SSH-2.0-OpenSSH_9.9)
• Web server banner observed
• Geolocation inference updates
• Ownership confirmation: Bharti Airtel Limited
• Subnet classification: "mostly_clean"

No escalation in threat signals observed over the observation window.

---

## Recommended Actions

Monitoring:

• Monitor neighbor IP 59.145.183.50 for potential lateral activity
• No immediate blocking required for 59.145.183.174
• Standard mobile carrier traffic monitoring applies

Firewall/Control Recommendations:

• Permissive rules appropriate for legitimate mobile carrier traffic
• Consider rate limiting if traffic patterns indicate scanning behavior
• No specific WAF rules required

Further Investigation:

• Evaluate if 59.145.183.50 requires separate threat assessment
• Monitor for any emergence of active services on this endpoint

---

Briefing Prepared: IP Intelligence Unit | Status: Active Monitoring | Classification: Unrestricted

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.