122.170.195.180📋 Copy

# IP INTELLIGENCE BRIEFING: 122.170.195.180

Classification: MODERATE RISK / PASSIVE INFRASTRUCTURE

Executive Summary:

IP address 122.170.195.180 presents as a moderate-risk, passive endpoint with no active services detected. The IP belongs to Airtel's ABTS DSL network (ASN 24560, RIR APNIC) with geolocation data showing conflicting origin information between US and India. Listed on 2 DNS blacklists. No active threat indicators observed.

---

## PROFILE SUMMARY

Risk Assessment:

• Risk Score: 40/100 (Moderate Risk)
• Stability Score: 0.0 (No ownership stability data)
• Authority Score: 0.0
• Abuse Confidence: Not applicable

Network Classification:

• Origin ASN: 24560
• BGP Prefix: 122.170.192.0/22
• Route Stability: False
• DNSSEC: Valid
• Listed on DNSBL: 2 of 8 total lists

Geolocation:

• Primary: US (Massachusetts, Boston)
• APNIC Registry: India (Delhi, Phase III)
• RIR: APNIC
• Abuse Contact: dsltac2north.unoc@airtel.com
• Geographic Consensus: Mixed data sources

---

## THREAT INDICATORS

Active Threats: None detected

• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Known Campaigns: None

Blacklist Status:

• DNSBL Listings: 2 (of 8 checked lists)
• Threat Feeds: Empty
• Pulsedive Risk: Not available

---

## NETWORK BEHAVIOR

Services & Ports:

• Open Ports: None detected
• Connection Type: Firewalled / No Services
• HTTPS/TLS: None observed
• HTTP Banner: None detected

DNS Activity:

• PTR Resolution: Failed
• Forward Resolution: Failed
• Hosted Domains: 0
• SPF/DMARC: Not configured (no domains)

Behavioral Analysis:

• Honeypot Hits: 0
• WAF Violations: 0
• Enumeration Strikes: 0
• Auto-Banned: No
• Active Attacker Status: False

---

## OBSERVATION HISTORY (11 Records)

Recent Observations (2026-07-29):

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Is Persistently Malicious: False
• Network Classification Updates: Airtel DSL network assignment

Historical Trend:

No significant changes observed over monitoring period. IP remains in passive state with no escalation in threat activity.

---

## RELATIONSHIP GRAPH

Connected Entities: None detected

• Related IPs: 0
• Organizations: 0
• Hostnames: 0
• Certificates: 0
• Subnets: 0

---

## NEIGHBORHOOD ANALYSIS

Subnet: 122.170.195.180/24

Abuse Density: 0 (Low)

Neighbor Distribution:

Classification: 1 low-risk neighbor detected

• No high-risk or medium-risk neighbors in subnet
• Overall subnet abuse density: 0%

---

## CONTROL PLANE DATA

Routing Information:

• Route Changes (30d): 0
• Route Stability: False
• MOAS Detection: No
• RPKI State: Not available
• IRR Consistency: Not available

Operator Metrics:

• Operator Score: 0.1304 (Minimal)
• Transit Networks: Comcast, Zayo

Traceroute:

• Hop Count: 26
• First Hop RTT: 0.2ms
• Last Hop RTT: 251.2ms
• Timed Out Hops: 13

---

## SECURITY RECOMMENDATIONS

Action Status: No immediate action required

Firewall Rules:

• Block: Not recommended (low threat profile)
• Rate Limit: Standard (0.13 operator score)
• Geo-blocking: Consider if legitimate traffic not expected from India/US

Monitoring Priorities:

• Monitor DNSBL listing changes
• Watch for service activation (port scans)
• Track geolocation consistency

Threat Mitigation:

• No specific threat mitigation required
• Standard baseline monitoring recommended

---

## CONCLUSION

IP 122.170.195.180 is a residential/commercial DSL endpoint (Airtel ABTS network) operating in passive mode with no active services. The moderate risk score is attributable to DNS blacklist presence rather than active malicious behavior. The IP shows no evidence of command-and-control activity, data exfiltration, or attack participation. Neighborhood analysis confirms low abuse density in the /24 subnet. Recommended for standard monitoring with no immediate defensive action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.