175.207.243.95📋 Copy

IP Intelligence Briefing: 175.207.243.95

Date: 2026-06-17

---

**1. Core Profile**

• Risk Score: 55 (Moderate Risk)
• Ownership: ASN 4766 (IP Manager, KT Corporation, South Korea)
• Geolocation: Jeju City, South Korea (35.91°N, 127.77°E)
• Network Role: Mobile device (KT LTE/5G) | No CDN/VPN/Hosting
• Services: HTTP (80), HTTPS (443), SSH (22) | TLS Certificate Issuer: Ruckus Wireless Inc.

---

**2. Threat Indicators**

• No Direct Threats: No known malware, spam, or attacker associations.
• DNS Observations:

- Listed in 3/8 DNSBLs (low abuse density).

- HTTP/HTTPS responses show 503 errors, but no malicious payloads.

• TLS Certificate: Self-signed, issued by Ruckus Wireless (potential internal use).

---

**3. Network Behavior**

• Subnet: 175.207.243.95/24 (clean, no malicious neighbors).
• Mobile Carrier: KT Corporation (MCC 450, MNC 08).
• BGP: Stable route (AS4766), no route changes in 30 days.

---

**4. Historical Activity**

• Recent Observations (June 2026):

- 503 HTTP errors, likely infrastructure issues.

- DNS listings flagged as "low severity" (3/8 lists).

- No persistent malicious activity or ownership changes.

---

**5. Recommendations**

• Monitor TLS Certificate: Investigate Ruckus Wireless certificate usage (internal vs. external).
• Check DNSBL Listings: Confirm legitimacy of DNSBL flags (e.g., Spamhaus, DNS-PHI).
• Track HTTP Errors: Monitor for recurring 503 errors indicating infrastructure instability.
• Network Segmentation: Ensure mobile device traffic is isolated from critical systems.

---

Conclusion:

The IP is a legitimate mobile device on KT’s network with no immediate malicious activity. While DNSBL flags and TLS certificate anomalies warrant further investigation, the overall risk remains moderate. SOC teams should prioritize monitoring for unexpected service disruptions or new threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.