182.75.234.236
Intelligence Briefing: IP 182.75.234.236/32
Executive Summary
The IP address 182.75.234.236 was classified as High Risk with a reputation score of 80. Analysis indicated the address was a blacklisted host listed on multiple DNS blocklists. Due to the high risk score and critical severity recommendation, immediate blocking is advised.
Ownership and Geolocation
The address belongs to ASN 9498 (Bharti Airtel Ltd.) under the Netname BHARTI-IN. Geolocation data placed the origin in India (IN), though geo-validation noted ICMP blocks. The network role was identified as a mobile carrier IP (Airtel LTE/5G) operating as a Web Server.
Technical and Threat Profile
* Ports: TCP/80 (HTTP) and TCP/443 (HTTPS) were open.
* Server Fingerprint: Nginx server; Powered by Express.
* Security Headers: HSTS enabled; CSP and Permissions Policy headers were missing.
* DNS: PTR hostname resolved to nsg-static-236.234.75.182-airtel.com. SPF records existed, but DMARC was not configured.
* Threat Indicators: The address was categorized as a Blacklisted Host with a DNSBL listed count of 4. No active attacker indicators or known campaigns were detected.
Confidence and Validity
The confidence level for this profile was Very Low (0.2232), and data sufficiency was recorded at 0.8333. Despite the low confidence, the risk score and blacklisting status warrant defensive action.
Recommended Action
Block the address at the firewall and perimeter.
* iptables: `iptables -A INPUT -s 182.75.234.236 -j DROP`
* nginx: `deny 182.75.234.236;`
* pf: `block in quick on egress from 182.75.234.236`
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Network Administrator |
| ASN | AS9498 |
| Network Name | BHARTI-IN |
| CIDR Block | 182.75.128.0/18 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | nsg-static-236.234.75.182-airtel.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | nsg-static-236.234.75.182-airtel.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 2/3 domains |
| DMARC | 0/3 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 3 domains |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2019-07-01T15:58:34+00:00 |
| Valid Until | 2119-06-07T15:58:34+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 36500 days |
| Serial Number | 00925F2A1D715F4C64 |
| Thumbprint | 0544A1C64AF2B1CEB875A4F7DD2A338507751754 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 37% | 2 | 5 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 19% | 2 | 2 |
| Overall | 22% | 8 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-17 04:21:53 UTC |
| Last Seen | 2026-09-27 14:43:29 UTC |
| Profile Built | 2026-09-27 14:43:56 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 43 |
Full dossier details are available via our API.