182.95.106.138📋 Copy

# IP Intelligence Briefing: 182.95.106.138/32

## Executive Summary

IP 182.95.106.138 is a high-risk mobile IP address associated with Bharti Airtel's network infrastructure in India. The address demonstrates elevated threat indicators including multiple DNSBL listings and presence within a neighborhood showing moderate abuse density. Immediate defensive monitoring is recommended.

## Threat Profile

## Network Characteristics

• Open Services: TCP/22 (SSH-2.0-OpenSSH_9.8)
• DNS Resolution: None detected
• Reverse DNS: Not configured
• TLS/SSL: No certificates detected
• Email Authentication: SPF/DMARC not configured

## Threat Indicators

• DNSBL Listings: 6 out of 8 total lists
• Operator Score: 0.2174 (Minimal)
• Known Attacker: Not flagged
• Tor Exit Node: False
• Spam Source: Not flagged
• Campaign Correlation: None detected

## Historical Observations

The IP has generated 22 observations across multiple signal types including operator scoring, routing analysis, service detection, ownership verification, reputation assessment, and geolocation. Recent observations indicate:

• Consistent mobile carrier attribution (Airtel)
• Neighborhood abuse density of 0.6
• Multiple signal confidence levels ranging from 0.23 to 0.90

## Neighborhood Analysis (182.95.106.0/24)

High-Risk Neighbors:

• 182.95.106.78 (Risk Score: 80)
• 182.95.106.102 (Risk Score: 80)
• 182.95.106.130 (Risk Score: 55)

## Relationship Graph

46 relationships detected, primarily same-network associations with BHARTI-IN. No cross-network, hostname, certificate, or organizational relationships were identified.

## Security Recommendations

1. Monitor: Implement enhanced logging for this IP due to high-risk classification (80/100)

2. Block: Consider blocking at network perimeter if traffic patterns indicate malicious activity

3. Investigate: Correlate with other high-risk neighbors (182.95.106.78, 182.95.106.102) for potential coordinated activity

4. DNSBL Check: Verify against remaining 2 unlisted DNSBLs for completeness

5. Mobile Traffic: Flag as mobile-originated traffic; validate business necessity for mobile IP connections

## Intelligence Confidence

Data confidence levels vary by signal type (0.23-0.90). The high risk score (80) combined with multiple DNSBL listings and neighborhood abuse density supports a High Risk classification despite the absence of specific threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.