122.187.229.43
IP Intelligence Briefing: 122.187.229.43
Date: 2026-06-07
---
**1. Overview**
- Risk Score: Moderate (55/100)
- Ownership: Registered to Bharti Airtel Ltd. (ASN 9498, India)
- Geolocation: Maharashtra, Navsari, India (20.96°N, 77.74°E)
- Network Role: Mobile carrier (LTE/5G) infrastructure
- Threat Status: No active threats, no malicious indicators, no spam, or known attacker associations
---
**2. Key Findings**
- Mobile Carrier Context:
- Part of Bharti Airtelโs network (MCC 404, MNC 10).
- LTE/5G technology, likely corporate or enterprise use.
- DNS Associations:
- Linked to `nsg-corporate-43.229.187.122.airtel.in` (PTR record).
- SPF and DMARC records configured for email security.
- Network Subnet:
- Subnet: `122.187.229.0/24`
- Abuse Density: 75% (12/16 neighbors flagged as high/medium risk).
- High-risk neighbors include IPs with scores up to 80 (e.g., 122.187.229.12, 122.187.229.59).
- Historical Observations:
- Stable ownership (no recent changes).
- Minimal risk signals over the past 30 days.
- No persistent malicious activity or campaign correlations.
---
**3. Threat & Security Context**
- No Direct Threats:
- No malicious indicators, spam, or blacklisted activity.
- No TLS certificates or open services detected.
- Subnet Risks:
- High abuse density in the subnet suggests potential for lateral movement or compromised neighbors.
- Monitor high-risk neighbors (e.g., 122.187.229.12, 122.187.229.59) for suspicious behavior.
- Geolocation Plausibility:
- Geolocation data matches India, with plausible routing paths.
---
**4. Recommendations**
- Monitoring:
- Track high-risk neighbors in the `122.187.229.0/24` subnet for unusual traffic patterns.
- Validate DNS associations with `airtel.in` domains for potential spoofing risks.
- Firewall Rules:
- Consider blocking high-risk neighbors (e.g., 122.187.229.12, 122.187.229.59) if they are not required assets.
- Implement egress filtering for traffic to Bharti Airtelโs network (ASN 9498).
- Further Investigation:
- Correlate with internal logs to verify if this IP is part of a larger network segment.
---
Source: IPDebrief Threat Intelligence Platform
Note: This IP appears to be a legitimate mobile carrier asset, but its subnet contains a significant number of high-risk IPs. Prioritize monitoring and segmentation for mitigated risk exposure.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | IRT-BHARTI-IN |
| ASN | AS9498 |
| Network Name | BNLD-209392-NewDelhi |
| CIDR Block | 122.187.0.0/16 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | nsg-corporate-43.229.187.122.airtel.in |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | nsg-corporate-43.229.187.122.airtel.in |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Web Server |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | โ |
| 22 | ssh | tcp | โ |
| Closed Ports | 25, 80, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | lighttpd/1.4.64 |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | 2024-05-21T18:26:24+00:00 |
| Valid Until | 2034-05-19T18:26:24+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_CHACHA20_POLY1305_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 3650 days |
| Serial Number | 25896DE94290AF050BF16D49423566E8B0F8C2B9 |
| Thumbprint | F5DD852C06DEFC30AB53AFBA525A90105C1E7A04 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 13% | 1 | 1 |
| Overall | 16% | 7 | 8 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-16 08:55:50 UTC |
| Last Seen | 2026-06-07 20:24:27 UTC |
| Profile Built | 2026-06-07 21:03:30 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.