116.68.72.250📋 Copy

# IP Intelligence Briefing: 116.68.72.250

Classification: Low Risk / Dynamic Residential

Date of Report: July 28, 2026

Analyst: IPDebrief Intelligence Team

## Executive Summary

IP address 116.68.72.250 is a dynamic residential endpoint operated by Asianet Satellite Communications Pvt Ltd (ASN 17465) in Thiruvananthapuram, Kerala, India. The IP presents a low overall risk score (30/100) with no active threat indicators, no open services, and no historical campaign associations. However, the IP exhibits route instability and has been detected on two DNSBL lists, warranting monitoring for potential residential proxy abuse.

## Technical Profile

Ownership & Network Classification:

• ASN: 17465 (Asianet Satellite Communications Pvt Ltd)
• Registration RIR: APNIC
• CIDR Block: 116.68.64.0/18
• Subnet: 116.68.72.0/24
• Network Role: Dynamic Residential / No Services

Geolocation:

• Country: India (IN)
• State/Region: Kerala
• City: Thiruvananthapuram
• Coordinates: 8.48°N, 76.95°E
• Timezone: Asia/Kolkata

DNS & Host Information:

• PTR Hostname: 116068dynamic072250.asianet.co.in
• Forward Resolved Hostname: 116068dynamic072250.asianet.co.in
• Domain: asianet.co.in
• Hosted Domain Count: 0

Services & Ports:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Service Banner: None

## Threat Assessment

Current Risk Score: 30 (Low Risk)

Abuse Confidence Score: Not applicable

Blacklist Status: 2 DNSBL listings detected

Threat Indicators:

• Known Attacker: No
• Tor Exit Node: No
• Known Campaign Association: None
• Spam Source: No
• Malware Distribution: No

Behavioral Indicators:

• WAF Violations: 0
• Honeypot Hits: 0
• Enumeration Strikes: 0
• Total Incidents: 0

Control Plane Data:

• Route Stability: Unstable (isRouteStable: false)
• Route Changes (30d): 0
• RPKI State: Not evaluated
• IRR Consistency: Not evaluated
• DNSSEC Valid: Yes

## Observation History

Fifteen signal observations recorded through July 28, 2026:

1. Geolocation Signals: Multiple consistent signals identifying the IP in Kerala, India, with variations between Thiruvananthapuram and Kazhakuttam. Organization identified as IRT-ASIANET-IN with abuse contact at abuse-reports@asianet.co.in.

2. Residential Proxy Detection: One signal (confidence 60%) from proxycheck-io flagged the IP as residential proxy type with ASN AS17465.

3. Port Scanning Activity: Port scanning detected with multiple ports probed during the observation window.

4. Campaign Correlation: No campaign matches or correlated IPs detected.

5. Certificate Analysis: No TLS certificates or certificate matches observed.

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

## Relationship Network

Identified Relationships:

• DNS Association: 116068dynamic072250.asianet.co.in

No additional relationships detected to:

• Related organizations
• Additional subnets
• Certificate subjects
• Related IP addresses

## Neighborhood Analysis

Subnet: 116.68.72.0/24

• Neighbor Count: 0
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• Classification: None

The subnet shows no evidence of coordinated abuse or neighboring threat activity.

## Recommended Actions

Based on the low risk profile and residential nature of this IP:

1. Monitor for Residential Proxy Abuse: The IP is flagged as a residential proxy (60% confidence). Monitor for unusual outbound traffic patterns that could indicate proxy misuse.

2. Route Stability Alert: The IP exhibits route instability (isRouteStable: false). Consider this in BGP monitoring contexts.

3. DNSBL Investigation: Two DNSBL listings detected. Investigate the specific lists for potential false positives or policy violations.

4. Port Scan Response: Recent port scanning activity detected. Verify if scanning originated from this IP or was directed at this IP.

5. Dynamic Residential Classification: Treat as dynamic residential endpoint. Implement appropriate rate limiting if used for inbound connections.

## Conclusion

IP 116.68.72.250 represents a low-risk dynamic residential endpoint from Asianet's infrastructure in Kerala, India. No active threats, campaigns, or malicious indicators were detected. The primary concerns are route instability and residential proxy classification. SOC teams should monitor for proxy abuse patterns and investigate the DNSBL listings, but no immediate blocking or mitigation actions are recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.