# 112.133.246.75 — IP Intelligence Summary 112.133.246.75 is an IPv4 address operated by Pradeep Kumar (AS24186), geolocated to New Delhi, India. As of October 8, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/112.133.246.75 - Last updated: 2026-10-08 ## Ownership - Organization: Pradeep Kumar - Network name: Railwire-IN - Allocated block: 112.133.246.0/24 - ASN: AS24186 (https://ipdebrief.com/asn/24186) - Regional registry: APNIC ## Location - City: New Delhi - Region: DL - Country: India - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Moderate Risk (55/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 112.133.246.75 **Classification:** Moderate Risk **Date of Analysis:** Current **Analyst:** SOC Intelligence Team \--- \## Executive Summary IP address 112.133.246.75 was assessed as Moderate Risk with an overall risk score of 55/100. The IP is assigned to ASN 24186 under organization Railwire-IN, registered to Anand Singh Chandel in the Delhi (DL) region, India. The address shows no known threat indicators, but is listed on 3 of 8 DNS blacklist sources. \## Technical Profile **Ownership & Registration:** \- ASN: 24186 \- Organization: Anand Singh Chandel \- Network Name: Railwire-IN \- CIDR Block: 112.133.246.0/24 \- RIR: APNIC **Geolocation:** \- Country: India (IN) \- Region: Delhi \- City: New Delhi \- Coordinates: 20.59, 78.96 \- Accuracy Radius: 1500 km \- Geographic Consensus: True **Network Role:** \- Service Purpose: Firewalled / No Services \- Open Ports: None detected \- TLS Certificate: None \- HTTP Title: None **Reputation Indicators:** \- Is Tor Exit: No \- Is Known Attacker: No \- Is Spam Source: No \- Blacklist Count: 0 \- Pulsedive Risk: Not available \- Known Campaigns: None identified \## Control Plane & Routing \- Origin ASN: 24186 \- BGP Prefix: 112.133.246.0/24 \- Operator Score: 0.1304 (Minimal) \- DNSSEC Valid: True \- DNSBL Listed Count: 3 of 8 total lists \- Route Stability: Not stable (route changes observed in 30-day period) \- RPKI State: Not available \## Temporal Analysis \- Ownership Changes: 0 \- Threat Persistence Days: 0 \- Threat Observation Count: 0 \- Persistently Malicious: False \- Average Ownership Days: Not available \## Network Neighborhood Analysis The /24 subnet 112.133.246.0/24 was scanned for neighboring addresses: \- Total Siblings Analyzed: 3 \- Abuse Density: 0 \- Risk Distribution: 3 medium-risk IPs identified **Neighbor IPs:** \- 112.133.246.78: Risk Score 55, Authority Score 50 \- 112.133.246.81: Risk Score 55, Authority Score 50 \- 112.133.246.83: Risk Score 55, Authority Score 50 All neighboring IPs share the same moderate risk profile, suggesting consistent network characteristics across the /24 block. \## Observation History Analysis of 11 historical observations revealed: \- Most recent signals observed on 2026-07-27 \- Geolocation signals consistently resolved to India \- No ownership changes detected \- No threat persistence indicators \- No persistently malicious behavior observed \- Overall signal confidence ranged from 0.17 to 0.85 \## Relationships The IP maintains relationships only within its own network scope: \- Target: Railwire-IN (Same Network) \- Relationship Type: Network Association \- Count: 3 entries (all identical network relationships) No external relationships to organizations, hostnames, certificates, or other entities were identified. \## Recommended Actions **Monitoring:** \- Increase logging verbosity and review recent activity from this IP \- Severity: High \- Reason: Elevated risk score (55/100) **Firewall/Blocking Rules:** | Platform | Rule | |----------|------| | iptables | \`iptables -A INPUT -s 112.133.246.75 -j DROP\` | | nftables | \`nft add rule inet filter input ip saddr 112.133.246.75 drop\` | | nginx | \`deny 112.133.246.75;\` | | pfSense | \`112.133.246.75/32\` | | Cloudflare WAF | Block IP (expression: ip.src eq 112.133.246.75) | | AWS WAF | Add address: 112.133.246.75/32 | \## Threat Assessment The IP address presents moderate risk primarily due to DNS blacklist listings (3 of 8 sources) and elevated risk score (55/100). No active threat indicators, known campaigns, or malicious behavior were detected. The network infrastructure shows no open services, and the IP is not associated with Tor, proxy, or hosting infrastructure. **Recommendation:** Monitor for activity increase. Consider blocking at perimeter firewalls based on the recommended rules, pending correlation with other threat intelligence sources. \--- *This briefing was generated using IPDebrief intelligence tools. All data is sourced from observed network intelligence and should be combined with additional signals before operational decisions.* ## Nearby addresses - 112.133.246.73 (https://ipdebrief.com/112.133.246.73) - 112.133.246.78 (https://ipdebrief.com/112.133.246.78) - 112.133.246.81 (https://ipdebrief.com/112.133.246.81) - 112.133.246.82 (https://ipdebrief.com/112.133.246.82) - 112.133.246.83 (https://ipdebrief.com/112.133.246.83) - 112.133.246.85 (https://ipdebrief.com/112.133.246.85) - 112.133.246.87 (https://ipdebrief.com/112.133.246.87) - 112.133.246.89 (https://ipdebrief.com/112.133.246.89) - 112.133.246.92 (https://ipdebrief.com/112.133.246.92) --- Source: IPDebrief, "112.133.246.75 IP intelligence", https://ipdebrief.com/112.133.246.75, updated 2026-10-08. Assessments are probabilistic.