115.160.72.42📋 Copy

IP Intelligence Briefing: 115.160.72.42

Date: 2026-06-16

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Ownership: Registered to IP Manager (ASN 9694, APNIC) in South Korea (KR).
• Geolocation: Jinju, South Korea (35.91°N, 127.77°E).
• Network Role: Web server with open ports 80 (HTTP), 443 (HTTPS), and 22 (SSH).
• TLS Certificate: Issued to Ruckus Wireless Inc. (Sunnyvale, CA, US).

---

**2. Threat Indicators**

• No direct malicious indicators (no malware, phishing, or exploit activity).
• DNSBL Listings: Appears in 5 of 8 DNSBLs (e.g., Spamhaus, Barracuda).
• BGP Analysis: Part of 115.160.72.0/21 subnet (AS9694), with stable route history.

---

**3. Observation History**

• Latest Scan (June 16, 2026): HTTP 503 error, TLSv1.2, and no HTTP headers.
• DNS Activity: No confirmed PTR records; DNSSEC valid.
• Network Changes: No recent ownership or threat persistence detected.

---

**4. Relationships**

• Network Affiliation: Linked to SCSNET-KR (likely a South Korean ISP/Cable TV provider).
• Certificate Chain: TLS certificate issued by Ruckus Wireless, which may indicate internal infrastructure.

---

**5. Neighborhood Analysis**

• Subnet: 115.160.72.0/24.
• Neighbor Activity: No active or risky sibling IPs detected.
• Abuse Density: Subnet classified as "clean" (0 abuse density).

---

**6. Recommendations**

• Monitor TLS Activity: Investigate Ruckus Wireless certificate validity and potential misconfiguration.
• Block DNSBL Listings: Consider blocking the IP to mitigate spam or phishing risks.
• Validate Geolocation: Confirm if the South Korean IP aligns with expected business operations.
• Network Segmentation: Isolate the subnet to limit lateral movement if compromised.

---

Note: No immediate actionable threats detected, but high risk score and DNSBL listings warrant further investigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.