116.72.53.167
Intelligence Briefing: 116.72.53.167/32
Risk Assessment:
The endpoint was assessed as Moderate Risk with a reputation score of 40. No direct evidence of malicious activity was identified in the threat profile.
Infrastructure and Ownership:
Ownership records linked the address to HATHWAY CABLE AND DATACOM LIMITED (ASN 17488) within the 116.72.0.0/14 block. The network role was classified as a Residential Endpoint.
Geolocation:
Data sources placed the origin in Surat, Gujarat, India, with a 1500km accuracy radius.
Technical Observations:
DNS records resolved to 53.72.116.167.hathway.com, though forward resolution was unconfirmed. Service scans detected no open ports or active HTTP/TLS services. Control plane data indicated a BGP prefix of 116.72.52.0/22 with inconsistent route stability.
Threat Indicators:
The address returned zero blacklist entries, no known attack campaigns, and no specific indicators of compromise in available threat feeds.
Recommendation:
Monitor the address for baseline residential traffic patterns. While the risk score suggests moderate concern, standard defensive monitoring is advised without immediate blocking due to the lack of active threat indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | HATHWAY CABLE AND DATACOM LIMITED |
| ASN | AS17488 |
| Network Name | HATHWAY-NET |
| CIDR Block | 116.72.0.0/14 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 53.72.116.167.hathway.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 53.72.116.167.hathway.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS17488 |
| Network Prefix | 116.72.52.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 6 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 23% | 2 | 4 |
| reputation | 25% | 1 | 4 |
| geolocation | 17% | 2 | 3 |
| Overall | 20% | 10 | 20 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-20 12:27:41 UTC |
| Last Seen | 2026-09-02 11:38:34 UTC |
| Profile Built | 2026-09-02 11:44:52 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 33 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 116.72.53.167
Who owns the IP address 116.72.53.167?
116.72.53.167 is registered to HATHWAY CABLE AND DATACOM LIMITED. The address falls within the 116.72.0.0/14 network block. Registration is held at APNIC.
Where is 116.72.53.167 located?
Geolocation data places 116.72.53.167 in Surat, GJ, India. The local time zone is Asia/Kolkata. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 116.72.53.167 malicious or safe?
116.72.53.167 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 116.72.53.167?
The reverse DNS (PTR) record for 116.72.53.167 is 53.72.116.167.hathway.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.
Is 116.72.53.167 a VPN, proxy, or data center address?
116.72.53.167 is classified as a residential network based on network ownership and behavioural analysis.