180.194.195.184📋 Copy

IP INTELLIGENCE BRIEFING

Target: 180.194.195.184

Classification: Residential Mobile

Risk Level: Moderate (Score: 40)

Analysis Date: July 30, 2026

---

Executive Summary

IP 180.194.195.184 is a residential mobile endpoint associated with PLDT/Smart infrastructure in Iligan City, Philippines. The address demonstrates moderate risk (score: 40) primarily due to DNSBL listings, though current threat indicators are absent. The IP is associated with a stable residential DSL network with no evidence of persistent malicious activity.

---

Network Intelligence

• ASN: 9299 (IRT-PLDT-PH)
• Organization: IRT-PLDT-PH, Residential_DSL
• Geolocation: Philippines, Iligan City, Soccsksargen region
• Network Type: Mobile carrier endpoint (PLDT/Smart, LTE/5G)
• CIDR Block: 180.194.254.0/24
• Network Classification: Residential mobile device, firewalled/no services

---

Threat Posture

• Risk Score: 40 (Moderate)
• Abuse Confidence Score: Not calculated
• Blacklist Status: Listed on 2 of 8 DNSBLs
• Threat Indicators: None detected
• Known Campaigns: None
• Tor Exit Node: No
• Proxy/VPN/CDN: No
• Open Ports: None detected
• Active Services: None

---

Temporal Analysis

• Observation Count: 12 signals recorded
• Ownership Stability: Stable (0 ownership changes)
• Threat Persistence: None observed
• Recent Classification: "Clean" (abuse density: 0)
• Threat Observation Count: 0

---

Subnet Analysis

• Subnet: 180.194.195.0/24
• Abuse Density: 0 (low)
• Neighbor Count: 1
• Neighbor IP: 180.194.195.101 (risk score: 40)
• Risk Distribution: 1 medium, 0 high, 0 low

---

Relationship Graph

• Related Entity: Residential_DSL network block
• Total Relationships: 1

---

Recommended Actions

Given the moderate risk score and DNSBL presence, the following firewall rules are recommended:

iptables:

```

iptables -A INPUT -s 180.194.195.184 -j DROP

```

nftables:

```

nft add rule inet filter input ip saddr 180.194.195.184 drop

```

nginx:

```

deny 180.194.195.184;

```

pfSense:

```

180.194.195.184/32

```

Cloudflare WAF:

```json

{

"description": "Block 180.194.195.184 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 180.194.195.184"

}

}

```

AWS WAF:

```json

{

"Addresses": ["180.194.195.184/32"],

"Description": "IPDebrief risk 40"

}

```

---

Analyst Notes

The IP represents a residential mobile endpoint with a moderate risk profile driven by historical DNSBL listings rather than active exploitation indicators. No open ports or services were detected. The subnet demonstrates low abuse density with one neighboring IP showing similar moderate risk characteristics. Due to the residential nature and mobile carrier association, false-positive potential exists. Consider context before blocking: verify if traffic patterns align with known malicious behavior or represent legitimate residential usage.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.