171.48.38.169📋 Copy

## IPDEBRIEF INTELLIGENCE BRIEFING

Target: 171.48.38.169/32

Date: 2026-07-30

Classification: Moderate Risk (Score: 50)

---

EXECUTIVE SUMMARY

IP 171.48.38.169 is a mobile device endpoint (Airtel/Bharti Airtel) located in Pune, Maharashtra, India. The IP belongs to ABTS-DSL-DEL network (ASN 24560) and presents moderate risk with no active threat indicators. No malicious activity or known campaign associations detected.

---

NETWORK OWNERSHIP & ATTRIBUTION

• ASN: 24560
• Organization: Network Administrator for ABTS DEL
• Network Name: ABTS-DSL-DEL
• CIDR Block: 171.48.32.0/19
• RIR: APNIC
• Mobile Carrier: Airtel (Bharti Airtel Ltd.) - LTE/5G technology
• Geolocation: India (IN), Maharashtra, Pune (±1500km accuracy)

---

THREAT INTELLIGENCE

• Risk Score: 50/100 (Moderate Risk)
• Abuse Confidence Score: Not calculated
• Blacklist Status: 0 entries
• Known Campaigns: None identified
• Threat Feeds: No indicators
• Not classified as: Tor exit node, known attacker, spam source, or proxy
• DNSBL Listings: 2 of 8 total lists (dnsblListedCount)

---

NETWORK CHARACTERISTICS

• Service Classification: Firewalled / No Services
• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None
• Infrastructure Type: Mobile endpoint (not cloud/CDN/VPN/hosting)
• Connection Type: Mobile carrier assignment (Airtel)

---

CONTROL PLANE ANALYSIS

• Origin ASN: 24560
• BGP Prefix: 171.48.32.0/21
• Route Stability: False (isRouteStable)
• RPKI State: Not validated
• IRR Consistency: Not assessed
• Route Changes (30d): 0
• MOAS Status: Not a Multiple Origin Autonomous System
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)

---

NEIGHBORHOOD ANALYSIS

• Subnet: 171.48.38.169/24
• Abuse Density: 0 (clean)
• Classification: clean
• Inherited Risk: 0
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• High/Medium Risk Neighbors: 0

---

RELATIONSHIP GRAPH

• Total Relationships: 5
• Relationship Types: Same Network (ABTS-DSL-DEL) - 5 instances
• Associated Entities: None beyond network infrastructure

---

OBSERVATION HISTORY

• Total Observations: 14
• Timeline: Recent observations from 2026-07-30
• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: False
• Signal Confidence Ranges: 0.30 - 0.85

Signals observed include geolocation inference (52% confidence, India), network classification (clean subnet classification), port scanning (no services detected), and ownership verification.

---

RECOMMENDED ACTIONS

Based on the moderate risk classification and mobile endpoint nature:

• Monitor for any emerging threat indicators
• No immediate blocking recommended
• Standard logging advised for mobile traffic patterns
• No specific firewall rules required at this time

---

ANALYST NOTES

This IP represents a legitimate mobile subscriber endpoint with no active malicious indicators. The moderate risk score (50) reflects general network classification rather than specific threat activity. The mobile carrier assignment (Airtel) and residential/mobile classification suggest consumer or enterprise mobile usage. No immediate defensive action required; maintain baseline monitoring.

Status: LOW PRIORITY / MONITOR

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.