182.95.181.214📋 Copy

IP Intelligence Briefing: 182.95.181.214

Date: 2026-06-17

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Ownership: Assigned to Bharti Airtel Ltd. (AS9498), a major Indian telecom provider.
• Geolocation: India (New Phase III), inferred with 1500km accuracy. No exact coordinates.
• Network Role: Mobile network (LTE/5G), likely a mobile device or carrier infrastructure.
• Services: Open SSH (port 22) with banner "Exceeded MaxStartups," no TLS/http services.
• Threat Indicators:

- Listed in 5+ DNSBLs (8 total lists).

- Observed in 15+ threat feeds (e.g., Alienvault OTX) with high-severity pulses.

- No direct malware or campaign associations.

---

**2. Observation History**

• Recent Activity (2026-06-17):

- Detected in 16 signals, including:

- Threat Feeds: 5 high-severity listings (e.g., spam, phishing).

- Network Scans: SSH port open, no TLS/http services.

- Geolocation: Inferred as India (20.59°N, 78.96°E).

- Stability: Route instability detected (unstable BGP prefix).

- No Persistent Malicious Activity: No long-term threat persistence.

---

**3. Relationships**

• Network Affiliation:

- Subnet 182.95.128.0/17 (Bharti Airtel).

- Linked to BHARTI-IN (AS9498) via multiple routes.

• Connections:

- 17 relationships, all tied to the same network (BHARTI-IN).

- No external organizations, domains, or certificates linked.

---

**4. Neighborhood Analysis**

• Subnet: 182.95.181.214/24
• Abuse Density: 85.7% (high risk).
• Neighbors:

- 7 IPs in the subnet, 6 with riskScore ≥ 80 (e.g., 182.95.181.22, 182.95.181.34).

- 1 low-risk IP (182.95.181.6).

• Inherited Risk: 10 (moderate).

---

**5. Recommendations**

• Monitoring: Continuously monitor for SSH brute-force attempts or unexpected network activity.
• Firewall Rules: Block the IP if it persists in threat feeds or shows malicious behavior.
• Subnet Review: Investigate the 182.95.181.0/24 subnet for potential lateral movement or shared infrastructure risks.
• Mobile Device: Given the mobile carrier context, consider it a mobile device (e.g., IoT, user device) rather than a static host.

---

Conclusion: This IP is associated with a high-risk mobile network and has a history of threat feed listings. While no direct malicious activity is observed, its subnet exhibits significant abuse density, warranting close monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.