125.23.183.62📋 Copy

# IP Intelligence Briefing: 125.23.183.62/32

## Executive Summary

IP address 125.23.183.62 is a mobile carrier endpoint associated with Bharti Airtel Limited (ASN 9498) with a moderate risk score of 40. The IP operates on the 125.16.0.0/13 network block and is geolocated to India (IN). No active services or open ports were detected, and the endpoint is classified as firewalled with minimal threat indicators.

## Risk Assessment

## Network Classification

• ASN: 9498 (Bharti Airtel Limited)
• Organization: BHARTI-IN
• Country: India (IN)
• Connection Type: Mobile (LTE/5G)
• Mobile Carrier: Airtel (MCC: 404, MNC: 10)
• Services: Firewalled / No Services
• DNS: No PTR hostnames, no forward resolution

## Threat Indicators

• Blacklist Count: 0
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• DNSBL Listed: 2 of 8 total lists
• Known Campaigns: None detected
• Threat Persistence: 0 days (not persistently malicious)

## Geolocation Data

• Region: Okhla
• Coordinates: 20.59, 78.96
• Accuracy Radius: 1500km
• RTT: 281.2ms avg (278ms min)
• Distance from Probe: 6904.7km

## Neighborhood Analysis (125.23.183.0/24)

The /24 subnet exhibits elevated abuse density with 4 sibling IPs showing significant risk:

Abuse Density: 0.5 (Elevated)

Risk Distribution: 2 High, 2 Medium, 0 Low

Classification: Mostly Clean with inherited risk of 10

## Historical Observations

• Total Observations: 21
• Most Recent Signal: 2026-06-22T13:07:39
• Threat Observation Count: 1
• Subnet Abuse Density Trend: 0.8 (High)
• Ownership Changes: 0

## Relationships

47 relationships detected, predominantly Same Network associations to BHARTI-IN network block.

## Recommended Actions

1. Allow Traffic: No immediate blocking required for this mobile carrier endpoint

2. Monitor Siblings: Investigate high-risk sibling IPs 125.23.183.138 and 125.23.183.142 (risk score 80)

3. Network Policy: Consider rate limiting mobile carrier traffic from this subnet given elevated neighborhood abuse density

4. Log Review: Monitor for unusual patterns from this IP due to 2 DNSBL listings despite no confirmed threat indicators

## Intelligence Note

The IP endpoint shows minimal threat activity but operates within a subnet with elevated abuse density (0.8). The high-risk sibling IPs suggest potential coordinated activity or shared infrastructure. Recommend monitoring the 125.23.183.0/24 subnet for correlated threat activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.