59.91.3.130
# IP Intelligence Briefing: 59.91.3.130
Classification: LOW RISK | Risk Score: 25/100
Date of Assessment: 2026-07-27
Analyst: IPDebrief Intelligence Unit
---
## EXECUTIVE SUMMARY
IP 59.91.3.130 is a low-risk address belonging to India's BSNL (BSNL-IN) MPLS-CGNAT infrastructure (ASN 9829). The address is firewalled with no open services. While the primary profile indicates US geolocation, historical signals show Indian routing through Bellary, KA. No active threat indicators or malicious activity were observed during the assessment window.
---
## NETWORK IDENTIFICATION
| Attribute | Value |
|---|---|
| **IP Address** | 59.91.3.130/32 |
| **ASN** | 9829 |
| **Organization** | IRT-BSNL-IN (India BSNL) |
| **Network Block** | 59.91.0.0/20 |
| **Geolocation (Primary)** | US-NJ, Newark |
| **Geolocation (Historical)** | IN, Bellary, KA |
| **IP Type** | CGNAT (Carrier-Grade NAT) |
---
## THREAT ASSESSMENT
Overall Risk: LOW (25/100)
| Indicator | Status |
|---|---|
| Known Attacker | No |
| Tor Exit Node | No |
| Spam Source | No |
| Blacklist Entries | 0 (Primary) / 1 (DNSBL) |
| Open Ports | None (Firewalled) |
| Active Threats | None |
| DNSBL Listed | Yes (1 of 8 lists) |
Threat Signals Observed:
- Port scanning activity detected in historical observations
- One DNSBL listing detected in control plane data
- Mixed geolocation signals (US vs IN) warrant monitoring
---
## OBSERVATION HISTORY
Total Observations: 14 signals over assessment period
Recent Activity:
- 2026-07-27 22:01: Port scanning detected; geolocation signals from Bellary, IN (reputation: 0, has_threats: true)
- 2026-07-27 22:00: Network registration confirmed (IRT-BSNL-IN, ASN 9829)
- 2026-07-27 22:03: Ownership stability confirmed (0 changes)
Temporal Analysis:
- Ownership changes: 0
- Threat persistence days: 0
- Persistently malicious: No
- Route stability: Unstable (isRouteStable: false)
---
## NETWORK RELATIONSHIPS
Connected Entities: 3 relationships identified
- All relationships point to network identifier: MPLS-CGNAT
- No associations with external hostnames, organizations, or SSL certificates
- Limited relationship graph indicates this IP operates as infrastructure endpoint rather than gateway
---
## NEIGHBORHOOD ANALYSIS
Subnet: 59.91.3.130/24
- Total Siblings: 0
- Active Siblings: 0
- Threat Siblings: 0
- Abuse Density: 0
- Risk Distribution: High: 0 | Medium: 0 | Low: 0
Assessment: No neighboring IPs with known malicious activity in immediate subnet.
---
## DEFENSIVE RECOMMENDATIONS
Current Status: No immediate blocking required
Monitoring Actions:
1. Monitor for service activation (firewalled status may change)
2. Watch for increased DNSBL listing activity
3. Correlate geolocation discrepancies (US vs IN signals)
Firewall Rules: No specific rules generated. Standard allow-deny policies apply.
---
## INTELLIGENCE NOTES
- BSNL Network Context: 59.91.0.0/20 is part of India's national internet backbone infrastructure
- CGNAT Classification: Carrier-grade NAT address typically used for ISP infrastructure, residential proxying, or enterprise networks
- Geolocation Discrepancy: Primary profile indicates US-NJ while historical signals show IN routing. This may indicate traffic routing through peering points or data collection inconsistencies
- Low Threat Profile: Despite DNSBL listing, no active threat indicators observed
Confidence Level: Moderate (due to geolocation inconsistencies)
---
End of Briefing
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-BSNL-IN |
| ASN | AS9829 |
| Network Name | MPLS-CGNAT |
| CIDR Block | 59.91.0.0/20 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS9829 |
| Network Prefix | 59.91.0.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 13% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-15 10:09:25 UTC |
| Last Seen | 2026-08-31 15:51:56 UTC |
| Profile Built | 2026-08-31 15:55:04 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 59.91.3.130
Who owns the IP address 59.91.3.130?
59.91.3.130 is registered to IRT-BSNL-IN. The address falls within the 59.91.0.0/20 network block. Registration is held at APNIC.
Where is 59.91.3.130 located?
Geolocation data places 59.91.3.130 in Rewāri, Haryana, India. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 59.91.3.130 malicious or safe?
59.91.3.130 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.