120.57.127.149
## Intelligence Briefing: 120.57.127.149
Classification: Low Risk / Benign
Date: 2026-07-27
Analyst: IPDebrief Intelligence
Executive Summary
IP 120.57.127.149 is a benign residential/enterprise address in India with no active threat indicators. The IP belongs to Mahanagar Telephone Nigam Limited (MTNL) under ASN 17813, operates within the 120.57.112.0/20 BGP prefix, and shows no evidence of malicious activity, hosting services, or infrastructure characteristics. Risk score: 0/100.
Network Attribution
- Organization: MTNL-AP - Mahanagar Telephone Nigam Limited, India
- ASN: 17813
- BGP Prefix: 120.57.112.0/20
- Country: India (IN)
- Allocation Date: 2008-03-19 (APNIC)
- Registration Status: Legitimate ISP address space
Threat Assessment
- Overall Risk Score: 0 (Low Risk)
- Abuse Confidence Score: Not applicable
- Blacklist Count: 0
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Known Campaigns: None
- Threat Feeds: No indicators
Network Role & Services
- Service Purpose: Firewalled / No Services
- Open Ports: None detected
- TLS Certificates: None
- HTTP Services: None
- Infrastructure Type: Not identified as CDN, cloud, VPN, proxy, or hosting provider
- Connection Type: Not classified (residential/mobile classification not confirmed)
DNS & Control Plane
- DNSSEC: Valid
- PTR Hostnames: None
- Forward Resolution: None
- Email Authentication: No SPF/DMARC records
- Control Plane Operator Score: 0.1304 (Minimal)
- Route Stability: Route changes observed in last 30 days (0)
- RPKI State: Not available
- DNSBL Listings: 0 of 8 total lists checked
Temporal Behavior
- Observation Count: 6 signals recorded
- Threat Persistence Days: 0
- Ownership Changes: 0
- Is Persistently Malicious: False
- Auto-Banned: False
- Active Attacker: False
Neighborhood Analysis
- Subnet: 120.57.127.149/24
- Neighbor Count: 0
- Abuse Density: 0
- Risk Distribution: High 0, Medium 0, Low 0
- Threat Siblings: 0
Relationship Graph
- Related Entities: 0
- Linked Subnets: None
- Linked Hostnames: None
- Linked Organizations: None
- Linked Certificates: None
Historical Signals
Recent observations (2026-07-27) confirm:
- DNSSEC validation: Valid
- ASN attribution: 17813 (MTNL-AP)
- Geographic attribution: IN (India)
- Operator classification: Minimal (0.1304)
- No threat signal evolution detected
Recommended Actions
No blocking or mitigation required. The IP address presents no security concerns. Standard network policies apply:
- Allow inbound/outbound traffic per organizational policy
- No firewall rules necessary for this IP
- No monitoring thresholds triggered
Intelligence Narrative
This IP address represents normal, benign network traffic from a legitimate Indian telecommunications provider. The address has been observed in recent scanning but shows no malicious behavior, service exposure, or infrastructure characteristics. The subnet exhibits zero abuse density and no related threat entities. Historical data confirms stable, non-malicious operation with consistent ISP-level attribution. No defensive action recommended; continue standard network monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amarjeetkaur Bedi |
| ASN | AS17813 |
| Network Name | MTNL |
| CIDR Block | 120.56.0.0/13 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS17813 |
| Network Prefix | 120.57.112.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 15:50:17 UTC |
| Last Seen | 2026-09-01 00:24:54 UTC |
| Profile Built | 2026-09-01 00:25:41 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 120.57.127.149
Who owns the IP address 120.57.127.149?
120.57.127.149 is registered to Amarjeetkaur Bedi. The address falls within the 120.56.0.0/13 network block. Registration is held at APNIC.
Where is 120.57.127.149 located?
Geolocation data places 120.57.127.149 in New Delhi, National Capital Territory of Delhi, India. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 120.57.127.149 malicious or safe?
120.57.127.149 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.