122.172.84.47📋 Copy

# IP Intelligence Briefing: 122.172.84.47/32

## Executive Summary

IP 122.172.84.47 is a residential/mobile broadband endpoint assigned to Airtel's DSL network in Bengaluru, Karnataka, India. The address exhibits moderate risk characteristics with a profile score of 65, driven by DNSBL listings despite no active threat indicators or open services.

## Infrastructure Classification

• Network Ownership: Network Administrator for ABTS KK (ASN 24560)
• CIDR Block: 122.172.0.0/17
• Mobile Carrier: Bharti Airtel Ltd. (MCC: 404, MNC: 10)
• Connection Type: LTE/5G residential broadband
• Service Status: Firewalled / No services detected

## Threat Assessment

Risk Score: 65/100 (Moderate Risk)

Threat Indicators:

• Known attacker: No
• Tor exit node: No
• Spam source: No
• Active blacklists: 0 (reputation sources)
• DNSBL listings: 3 of 8 total lists flagged

Security Control Status:

• Control plane shows route instability (isRouteStable: false)
• DNSSEC valid: true
• RIR registry: APNIC

## Neighborhood Analysis

Subnet: 122.172.84.0/24

• Abuse Density: 0.2 (low)
• Classification: mostly_clean
• Threat Siblings: 1 of 5 active addresses

Adjacent IP Risk Distribution:

## Historical Intelligence

• Observations: 18 total signal observations recorded
• Threat Persistence: 0 days (not persistently malicious)
• Ownership Changes: 0
• Most Recent Activity: 2026-07-31

## DNS & Hostname Intelligence

• PTR Record: abts-kk-dynamic-047.84.172.122.airtelbroadband.in
• Forward Resolution: Confirmed for 1 hostname
• Domain: airtelbroadband.in
• Email Authentication: SPF and DMARC records present

## Network Services

• Open Ports: None detected
• HTTP/TLS Services: Inactive
• Certificate Status: No TLS certificates

## Recommended Actions

1. Monitor: Track for service activation or service detection

2. Block Threshold: Apply rate limiting rather than outright blocking given residential classification

3. Context: Treat as legitimate residential endpoint with elevated DNSBL presence

4. Correlation: Investigate any correlation with IP 122.172.84.236 (risk score 40) if shared activity detected

## Assessment Conclusion

This IP represents a legitimate residential broadband endpoint with moderate risk due to DNSBL presence, but lacks active threat indicators. The subnet shows low abuse density. Recommend monitoring rather than immediate blocking, with escalation if service activity or threat indicators emerge.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.