42.105.182.99📋 Copy

# IP INTELLIGENCE BRIEFING: 42.105.182.99/32

Classification: Low Risk

Generated: Current

Analyst: IPDebrief SOC

---

## EXECUTIVE SUMMARY

IP address 42.105.182.99 is a low-risk residential/mobile infrastructure node operated by Vodafone Idea Ltd. (VIL) in Guwahati, Assam, India. The IP exhibits minimal threat indicators with no active malicious campaigns detected. Network classification indicates the address is firewalled with no open services.

---

## NETWORK OWNERSHIP & GEOLOCATION

---

## RISK ASSESSMENT

Overall Risk Score: 25 (Low Risk)

Reputation: Low Risk

Abuse Confidence: Not Available

Risk Indicators

• Blacklist Status: 0/0 blacklists
• DNSBL Lists: 1 of 8 lists (minimal impact)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Network Control Plane

• Route Stability: Unstable
• DNSSEC Valid: Yes
• Operator Score: 0.1304 (Minimal)
• Abuse Density: 1 (neighborhood classification: mostly_clean)
• Threat Persistence: 0 days

---

## NETWORK SERVICES & DNS

---

## OBSERVATION HISTORY

Total Observations: 15 signals

Latest Activity: 2026-07-30

Recent Signal Timeline

1. Geolocation Inference (Confidence: 0.52)

- Location: Guwahati, India (20.59, 78.96)

- Accuracy: 1500km radius

- Method: Multi-signal inference

2. Ownership Confirmation (Confidence: 0.95)

- Organization: Vodafone Idea Ltd. (VIL)

- Abuse Contact: vilapnicspoc@vodafoneidea.com

- CIDR: 42.105.0.0/16

3. Traceroute Analysis (Confidence: 0.90)

- Status: ICMP blocked - unable to validate

- Claimed Location: Guwahati (26.1885, 91.7392)

- Distance: 7410.6km

- Minimum Possible RTT: 148.21ms

4. Network Classification (Confidence: 0.85)

- RIR: APNIC

- Status: Not persistently malicious

- Threat Observation Count: 1

---

## RELATIONSHIP GRAPH

Connected Entities: 3 relationships

• VIL-IN (Same Network) – Repeated associations confirm consistent network assignment
• No external hostname, certificate, or organizational relationships detected

---

## NEIGHBORHOOD ANALYSIS

Subnet: 42.105.182.0/24

Abuse Density: 1 (Low)

Classification: Mostly Clean

Total Siblings: 1

Active Siblings: 0

Threat Siblings: 1

The /24 subnet exhibits minimal abuse activity, consistent with residential/mobile carrier infrastructure patterns.

---

## SECURITY ACTIONS & RECOMMENDATIONS

Recommended Actions: None

Firewall Rules: Not Generated

Analysis

The low risk score (25), absence of open services, and minimal threat indicators support a "monitor but do not block" posture. No specific firewall rules are recommended at this time.

---

## THREAT INTELLIGENCE CONCLUSIONS

1. Risk Level: LOW – IP is classified as residential/mobile infrastructure with no active threat indicators

2. Ownership: Legitimate telecom carrier (Vodafone Idea Ltd.)

3. Services: No open ports detected; IP is firewalled

4. Campaigns: No associated threat campaigns identified

5. Persistence: Not persistently malicious; threat observation count is minimal (1)

6. Monitoring Status: Continue passive monitoring; no immediate blocking required

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.