112.133.246.75📋 Copy

# IP Intelligence Briefing: 112.133.246.75

Classification: Moderate Risk

Date of Analysis: Current

Analyst: SOC Intelligence Team

---

## Executive Summary

IP address 112.133.246.75 was assessed as Moderate Risk with an overall risk score of 55/100. The IP is assigned to ASN 24186 under organization Railwire-IN, registered to Anand Singh Chandel in the Delhi (DL) region, India. The address shows no known threat indicators, but is listed on 3 of 8 DNS blacklist sources.

## Technical Profile

Ownership & Registration:

• ASN: 24186
• Organization: Anand Singh Chandel
• Network Name: Railwire-IN
• CIDR Block: 112.133.246.0/24
• RIR: APNIC

Geolocation:

• Country: India (IN)
• Region: Delhi
• City: New Delhi
• Coordinates: 20.59, 78.96
• Accuracy Radius: 1500 km
• Geographic Consensus: True

Network Role:

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None

Reputation Indicators:

• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Blacklist Count: 0
• Pulsedive Risk: Not available
• Known Campaigns: None identified

## Control Plane & Routing

• Origin ASN: 24186
• BGP Prefix: 112.133.246.0/24
• Operator Score: 0.1304 (Minimal)
• DNSSEC Valid: True
• DNSBL Listed Count: 3 of 8 total lists
• Route Stability: Not stable (route changes observed in 30-day period)
• RPKI State: Not available

## Temporal Analysis

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: False
• Average Ownership Days: Not available

## Network Neighborhood Analysis

The /24 subnet 112.133.246.0/24 was scanned for neighboring addresses:

• Total Siblings Analyzed: 3
• Abuse Density: 0
• Risk Distribution: 3 medium-risk IPs identified

Neighbor IPs:

• 112.133.246.78: Risk Score 55, Authority Score 50
• 112.133.246.81: Risk Score 55, Authority Score 50
• 112.133.246.83: Risk Score 55, Authority Score 50

All neighboring IPs share the same moderate risk profile, suggesting consistent network characteristics across the /24 block.

## Observation History

Analysis of 11 historical observations revealed:

• Most recent signals observed on 2026-07-27
• Geolocation signals consistently resolved to India
• No ownership changes detected
• No threat persistence indicators
• No persistently malicious behavior observed
• Overall signal confidence ranged from 0.17 to 0.85

## Relationships

The IP maintains relationships only within its own network scope:

• Target: Railwire-IN (Same Network)
• Relationship Type: Network Association
• Count: 3 entries (all identical network relationships)

No external relationships to organizations, hostnames, certificates, or other entities were identified.

## Recommended Actions

Monitoring:

• Increase logging verbosity and review recent activity from this IP
• Severity: High
• Reason: Elevated risk score (55/100)

Firewall/Blocking Rules:

## Threat Assessment

The IP address presents moderate risk primarily due to DNS blacklist listings (3 of 8 sources) and elevated risk score (55/100). No active threat indicators, known campaigns, or malicious behavior were detected. The network infrastructure shows no open services, and the IP is not associated with Tor, proxy, or hosting infrastructure.

Recommendation: Monitor for activity increase. Consider blocking at perimeter firewalls based on the recommended rules, pending correlation with other threat intelligence sources.

---

*This briefing was generated using IPDebrief intelligence tools. All data is sourced from observed network intelligence and should be combined with additional signals before operational decisions.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.