122.170.98.139📋 Copy

IP Intelligence Briefing: 122.170.98.139

Date: 2026-06-17

---

**1. Core Profile**

• Risk Score: High (80/100)
• Ownership:

- ASN: 24560

- Organization: "Network Administrator for ABTS MUM" (APNIC registered)

- Geolocation: Mumbai, Maharashtra, India (122.170.98.139/24 subnet)

• Network Role: Mobile carrier (Airtel) LTE/5G, infrastructure type: Mobile Carrier.
• Threat Indicators:

- Listed in 5/8 DNSBLs (abuse confidence score: 4).

- TLS certificate with self-signed SANs (CN=dsldevice.lan) observed.

- No active malware indicators or known attacker campaigns.

---

**2. Observation History**

• Recent Activity (2026-06-17):

- DNSBL Listings: Detected in 5 DNSBLs (high severity).

- TLS Scan: TLSv1.3 with AES-256-GCM cipher suite; server banner: "thttpd".

- DNS Resolution: Valid DNSSEC-signed record (139.98.170.122.in-addr.arpa).

- Email Security: SPF/DKIM records found for "airtelbroadband.in" (SPF: `include:airtel.com`).

---

**3. Network Relationships**

• Subnet: 122.170.98.0/24 (ABTS-WEST-DSL-MUM).
• Linked Entities:

- Same network as "ABTS-WEST-DSL-MUM" (APNIC).

- No direct relationships to known malicious organizations or domains.

---

**4. Subnet Analysis**

• Neighbor Risk: No active IPs in the 122.170.98.0/24 subnet (abuse density: 0).
• Isolation: IP appears isolated; no sibling IPs detected.

---

**5. Actionable Insights**

• Threat Level: High risk due to DNSBL listings and self-signed TLS certificates.
• SOC Recommendations:

- Monitor for outbound traffic to known malicious domains.

- Investigate TLS certificate anomalies (self-signed SANs).

- Block IP in firewall rules if associated with unauthorized access.

- Verify if device is part of a compromised mobile network (Airtel).

---

Note: No active malware or campaign indicators detected. Further investigation into DNSBL listings and TLS anomalies recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.