182.95.176.194📋 Copy

IP Intelligence Briefing: 182.95.176.194

Date: 2026-06-17

---

**1. Core Risk Profile**

• Risk Score: 80 (High Risk)
• Provider: Bharti Airtel (AS9498)
• Geolocation: New Delhi, India (Phase III, New)
• Threat Indicators:

- Listed in 6/8 DNSBLs (Spamhaus, OpenDNS, etc.) with high severity.

- SSH service (port 22) exposed, no TLS/HTTP indicators.

- Mobile LTE/5G network, likely residential/mobile carrier infrastructure.

---

**2. Historical Observations**

• Recent Activity (Last 30 Days):

- Flagged 6 times in DNSBLs (Spamhaus, OpenDNS, etc.) with high confidence.

- No persistent malicious campaigns or TLS certificate anomalies.

- Subnet abuse density: 0.5 (moderate risk in 182.95.176.0/24).

---

**3. Network Relationships**

• Linked Entities:

- Same network: BHARTI-IN (AS9498)

- Subnet: 182.95.176.0/24 (abuse density: 50%).

• Neighbors:

- 182.95.176.122 (Risk: 80, High)

- 182.95.176.206 (Risk: 40, Medium)

---

**4. Threat Implications**

• Likely Use Case: Residential/mobile ISP infrastructure with potential for abuse.
• Vulnerabilities:

- Unsecured SSH service (port 22) could be exploited for lateral movement.

- DNSBL listings suggest spam or phishing activity.

• Recommendations:

- Block IP via firewall (iptables/nftables) based on DNSBL matches.

- Monitor SSH traffic for brute-force attempts.

- Investigate neighbors (182.95.176.122) for potential lateral movement.

---

Next Steps:

• Correlate with internal threat feeds for known malicious campaigns.
• Validate SSH service with port scanning tools.
• Flag for SOC team review due to high DNSBL exposure.

Source: IPDebrief Threat Intelligence Platform.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.