122.161.173.171📋 Copy

# IP Intelligence Briefing: 122.161.173.171/32

## Executive Summary

IP address 122.161.173.171 is classified as Moderate Risk (risk score: 55/100) and is associated with Airtel mobile broadband infrastructure. The IP shows no active threat indicators but is listed on 3 of 8 DNS blocklists. Network role classification indicates residential/mobile broadband with firewalled/no services state.

## Ownership and Network Classification

• ASN: 24560 (ABTS-DSl-DEL)
• Organization: Network Administrator for ABTS DEL
• Network Block: 122.161.0.0/16 (APNIC RIR)
• Mobile Carrier: Airtel (Bharti Airtel Ltd.) - LTE/5G
• Mobile Carrier Codes: MCC 404, MNC 10
• Geolocation: Newark, US (USA) - *Note: Mobile carrier data indicates India connectivity (MCC 404)*
• Classification: Mobile/Residential broadband, Firewalled/No Services

## Threat Intelligence Assessment

Current Threat Status: No active threat indicators detected

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None identified
• DNSBL Listings: 3/8 lists (medium-severity listings present)

Network Behavior: No open ports detected; services show as firewalled. DNS resolution points to airtelbroadband.in domain with PTR hostname abts-north-dynamic-171.173.161.122.airtelbroadband.in.

## Subnet and Neighborhood Analysis

• Subnet: 122.161.173.171/24
• Abuse Density: 0 (clean subnet)
• Total Siblings: 3
• Active Siblings: 1
• Threat Siblings: 0
• Neighbor Risk Distribution: 1 medium-risk IP (122.161.173.197, risk score 40)

The subnet shows low overall abuse density, but one neighboring IP (122.161.173.197) carries a moderate risk score of 40.

## Historical Observation Trends

Analysis of 16 observation records reveals:

• Recent DNS resolution activity (2026-07-29)
• Subnet classification consistently reported as "clean"
• Blacklist listings observed but no persistent malicious activity detected
• No ownership changes recorded

## Related Entities

• Network Association: ABTS-DSl-DEL
• DNS Associations: abts-north-dynamic-171.173.161.122.airtelbroadband.in (duplicate entries)
• Control Plane: BGP prefix 122.161.172.0/22, origin ASN 24560
• Route Stability: Not stable (route changes observed in 30-day window)

## Recommended Security Actions

Based on risk score 55/100 and moderate threat indicators:

1. Monitoring: Increase logging verbosity and review recent activity from this IP

2. Firewall Rules:

- iptables: `iptables -A INPUT -s 122.161.173.171 -j DROP`

- nftables: `nft add rule inet filter input ip saddr 122.161.173.171 drop`

- nginx: `deny 122.161.173.171;`

- pfSense: `122.161.173.171/32`

- Cloudflare WAF: Block IP with expression `ip.src eq 122.161.173.171`

- AWS WAF: Add 122.161.173.171/32 to blocked addresses

## Analyst Notes

This IP represents residential/mobile broadband infrastructure with moderate risk characteristics. While no active malicious activity was detected, the combination of DNS blacklist presence and elevated risk score warrants monitoring. The subnet overall remains clean, but the medium-risk neighbor IP (122.161.173.197) should be included in expanded monitoring if traffic patterns suggest correlation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.