202.164.42.142📋 Copy

# IP Intelligence Briefing: 202.164.42.142/32

## Executive Summary

IP address 202.164.42.142 is a residential endpoint from India operating on IRT-ECLTELECOM-IN (INFOTEL CONNECT) infrastructure. The IP carries a moderate risk score of 40 but shows no active threat indicators. Network neighborhood analysis indicates a clean subnet with minimal abuse density.

## Infrastructure Profile

• Organization: IRT-ECLTELECOM-IN (INFOTEL CONNECT)
• ASN: 17917
• Network Block: 202.164.42.0/24
• Netname: DUKE_FASHIONS_INDIA_LTD
• Geolocation: Hoshiarpur, Punjab, India (IN)
• Infrastructure Type: Residential Endpoint
• Registration Authority: APNIC

## Threat Assessment

Risk Score: 40 (Moderate Risk)

The IP is not classified as hosting, CDN, VPN, proxy, cloud, or mobile infrastructure. No open services or TLS certificates are actively advertised on the endpoint.

## Network Context

• Subnet Classification: Clean
• Abuse Density: 0%
• Sibling IPs: 1 total, 0 active, 0 threat
• Inherited Risk: 0
• Route Stability: Unstable (route changes observed in 30-day window)
• BGP Prefix: 202.164.42.0/24

## DNS Analysis

• PTR Hostname: dukeindia.com
• Forward Resolution: Not confirmed
• SPF Record: Present
• DMARC Record: Present
• Domain: dukeindia.com

## Historical Activity

18 observations recorded on 2026-07-25 show consistent residential classification with no evidence of persistent malicious activity. Risk signals have remained stable with no escalation trends.

## Related Entities

• Network: DUKE_FASHIONS_INDIA_LTD (repeated in relationship graph)
• DNS: dukeindia.com (multiple DNS associations)

## Recommended Actions

Based on the moderate risk profile, the following firewall rules are recommended:

iptables:

```bash

iptables -A INPUT -s 202.164.42.142 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 202.164.42.142 drop

```

nginx:

```nginx

deny 202.164.42.142;

```

Cloudflare WAF:

```json

{

"description": "Block 202.164.42.142 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 202.164.42.142"

}

}

```

AWS WAF:

```json

{

"Addresses": ["202.164.42.142/32"],

"Description": "IPDebrief risk 40"

}

```

## Analyst Notes

The IP address exhibits a moderate risk score primarily due to DNSBL presence and residential classification. No active malicious behavior has been observed. The associated domain (dukeindia.com) implements SPF and DMARC records. The subnet shows zero abuse density with no threat-sibling IPs. Recommended action is monitoring or blocking based on organizational policy for moderate-risk residential IPs.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.