182.48.94.182📋 Copy

# INTELLIGENCE BRIEFING: 182.48.94.182

## Executive Summary

IP address 182.48.94.182 is a residential endpoint from Bangladesh (Dhaka) with a moderate risk score of 40. The IP is classified as residential infrastructure with no known threat indicators, though it appears on 2 of 8 DNS blacklists.

## Technical Profile

• ASN: 63969 (IRT-EARTHTELECOMMUNICATION-BD)
• Organization: RaceOnlineLimited
• CIDR Block: 182.48.94.0/24
• Geolocation: Dhaka, Bangladesh (23.77°N, 90.37°E)
• Infrastructure Type: Residential Endpoint
• Risk Score: 40/100 (Moderate)

## Threat Intelligence Assessment

The IP shows no active threat indicators:

• Known attacker: No
• Tor exit node: No
• Spam source: No
• Blacklist count: 0
• Known campaigns: None detected

Control plane analysis reveals the IP is listed on 2 DNS blacklists out of 8 total lists evaluated. The operator score of 0.1304 indicates minimal operator-level concern.

## Network Context

Subnet Analysis (182.48.94.0/24):

• Abuse density: 0%
• Neighboring IPs: 2 (182.48.94.80, 182.48.94.176)
• Risk distribution across subnet: Low

Related Entities:

• Network: RaceOnlineLimited
• No additional hostnames, organizations, or certificates detected

## Behavioral History

11 observations recorded since initial detection. Most recent signals (2026-07-23) confirm:

• Residential classification
• Dhaka geolocation consistency
• APNIC registration maintained
• No evidence of persistent malicious activity

## Recommended Actions

Immediate Mitigation:

• Block traffic at perimeter firewall
• Apply rules to application-level proxies

Implementation Rules:

```bash

# iptables

iptables -A INPUT -s 182.48.94.182 -j DROP

# nftables

nft add rule inet filter input ip saddr 182.48.94.182 drop

# nginx

deny 182.48.94.182;

# pfSense

182.48.94.182/32

# Cloudflare WAF

{"description":"Block 182.48.94.182 — IPDebrief risk score 40","action":"block","filter":{"expression":"ip.src eq 182.48.94.182"}}

# AWS WAF

{"Addresses":["182.48.94.182/32"],"Description":"IPDebrief risk 40"}

```

## Analyst Notes

The moderate risk score warrants attention but does not indicate confirmed malicious activity. The residential classification combined with residential geolocation suggests legitimate consumer internet access. However, the DNS blacklist presence indicates some reputation concerns in the broader ecosystem. Monitor for correlation with other network activity before implementing permanent blocks.

Classification: Moderate Risk - Monitor/Block

Priority: Medium

Last Updated: 2026-07-23

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.