122.161.49.131📋 Copy

# Intelligence Briefing: 122.161.49.131/32

Target IP: 122.161.49.131/32

Date: 2026-07-29

Classification: Mobile Residential Broadband

## Executive Summary

IP address 122.161.49.131 was classified as moderate risk (risk score: 40) and identified as a mobile broadband endpoint belonging to Bharti Airtel's ABTS Delhi network. The IP operates within Airtel's residential broadband infrastructure, shows no active threat indicators, and is associated with legitimate ISP operations. No immediate blocking action is recommended.

## Ownership and Infrastructure

The IP belongs to ASN 24560 (Bharti Airtel Ltd.), organized under "Network Administrator for ABTS DEL" within the 122.161.0.0/16 CIDR block. Geographic intelligence indicates operation from Noida, Uttar Pradesh, India (APNIC RIR). The IP was detected on Airtel's LTE/5G mobile network (MCC 404, MNC 10). DNS resolution confirmed the hostname abts-north-dynamic-131.49.161.122.airtelbroadband.in, consistent with Airtel's residential broadband addressing scheme.

## Threat Assessment

Threat indicators remained absent. The IP was not flagged as a Tor exit node, known attacker, or spam source. Blacklist enumeration returned zero hits. DNSBL listing showed two entries across eight total lists, attributable to standard ISP-level scanning activity rather than confirmed malicious use. No open ports were detected, and the service profile was classified as "Firewalled / No Services."

## Network Context

The /24 subnet (122.161.49.0/24) displayed a clean classification with an abuse density score of 0. Among five sibling IPs in the neighborhood, one (122.161.49.162) shared a moderate risk score (40), while four siblings (122.161.49.143, 122.161.49.178, 122.161.49.242, 122.161.49.252) maintained zero risk. This pattern aligns with expected residential broadband traffic distribution.

## Historical Observations

Seventeen signal observations were recorded, most recently on 2026-07-29. Historical signals included geolocation inference (confidence 0.52), subnet classification (clean, confidence 0.75), ownership verification (confidence 0.90), and abuse density assessment (confidence 0.85). No persistent malicious activity or ownership changes were detected over the observation period.

## Relationship Mapping

Five relationships were identified: two same-network associations to ABTS-DSl-DEL and three DNS associations to the Airtel broadband hostname. All relationships confirmed legitimate ISP infrastructure attribution.

## Recommended Actions

No blocking or mitigation actions are recommended. The IP represents legitimate mobile broadband infrastructure from a Tier-1 Indian carrier. SOC teams may monitor the IP for unusual behavioral anomalies, though the current profile indicates standard residential broadband usage patterns.

Status: Monitor

Threat Level: Low

Action Required: None

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.