122.162.240.149📋 Copy

# IP Intelligence Briefing: 122.162.240.149/32

Classification: Moderate Risk - Mobile Broadband Origin

## Executive Summary

IP 122.162.240.149 is a mobile broadband address assigned to Airtel (Bharti Airtel Ltd.) in Jaipur, Rajasthan, India (ASN 24560). The IP carries a risk score of 55/100 and is associated with DNSBL listings across 3 of 8 total lists. No active services or open ports were detected; the address is firewalled with no HTTP/TLS services responding.

## Network Intelligence

Ownership & Classification:

• ASN: 24560 (Network Administrator for ABTS DEL)
• Organization: Bharti Airtel Ltd.
• CIDR Block: 122.162.240.0/22 (Control Plane)
• Connection Type: Mobile (LTE/5G)
• Network Role: Firewalled / No Services

Geolocation:

• Country: India (IN)
• Region: Rajasthan
• City: Jaipur
• Accuracy Radius: 1500km
• Geo Validation: Inconsistent signals (geoPlausible: false)

DNS Infrastructure:

• PTR Record: abts-north-dynamic-149.240.162.122.airtelbroadband.in
• Forward Resolution: Confirmed
• Email Authentication: SPF and DMARC configured (airtelbroadband.in)
• Forward Hostnames: 1 record

## Threat Indicators

• DNSBL Listings: 3 of 8 total lists
• Risk Breakdown: Provider 0, Authority 0, Stability 0
• Known Attacker: No
• Tor Exit: No
• Spam Source: No
• Campaign Correlation: None detected

## Observation History

19 total observations recorded. Recent activity (2026-06-17) indicates:

• DNS signals showing valid SPF/DMARC configuration
• Geolocation signals consistently pointing to India
• Operator score: 0.1304 (Minimal)
• No persistent malicious behavior detected

## Neighborhood Analysis

Subnet: 122.162.240.0/24

• Abuse Density: 0
• Classification: Mostly Clean
• Inherited Risk: 2
• Threat Siblings: 1
• Active Siblings: 0

## Network Relationships

32 relationships identified, primarily same-network associations (ABTS-DSl-DEL). No external organizational or certificate relationships detected.

## Recommended Actions

Immediate:

1. Increase logging verbosity and review recent activity from this IP

2. Implement blocking rules based on risk profile

Firewall Recommendations:

• iptables: `iptables -A INPUT -s 122.162.240.149 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 122.162.240.149 drop`
• nginx: `deny 122.162.240.149;`
• pfSense: `122.162.240.149/32`
• Cloudflare WAF: Block with description "IPDebrief risk 55"
• AWS WAF: Add 122.162.240.149/32 to block list

## Analyst Notes

The IP represents a mobile broadband connection with elevated risk primarily due to DNSBL presence. No active services or scanning behavior observed. The moderate risk score (55) warrants monitoring but does not indicate confirmed malicious activity. Consider context of any observed network behavior before implementing blocking.

Briefing Generated: IPDebrief Intelligence Platform

Data Sources: Profile, History, Relationships, Neighborhood, Actions

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.