43.229.90.73📋 Copy

# IP Intelligence Briefing: 43.229.90.73/32

Date: 2026-07-27

Risk Score: 40/100 (Moderate Risk)

Classification: ISP Dynamic Address / Geolocation Inconsistency

## Executive Summary

IP 43.229.90.73 presents moderate risk due to geolocation inconsistencies between registration data (US/Newark) and observed DNS resolution (India/Thrissur). The address belongs to Kerala Vision ISP dynamic pool with APNIC registration. No active threat indicators detected, but geographic discrepancy warrants monitoring.

## Technical Profile

• ASN: 138754 (KCCL / NOC ADMINISTRATOR)
• CIDR: 43.229.88.0/22
• RIR: APNIC
• DNS Resolution: keralavisionisp-dynamic-73.90.229.43.keralavisionisp.com
• Network Role: Firewalled / No Services Detected
• Open Ports: None detected
• TLS Certificate: None

## Geolocation Analysis

Critical Finding: Geographic data conflicts require validation:

• Profile Data: US / Newark, NJ (US-NJ)
• Observed Data: India / Thrissur, Kerala (IN) - Confidence 70%
• Registration: APNIC (Asia-Pacific)
• Consensus: False (2 sources disagree)

## Threat Assessment

• Blacklist Status: Listed on 2 of 8 DNSBLs
• Threat Indicators: None detected
• Known Campaigns: None correlated
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Subnet Abuse Density: 0 (Clean classification)
• Threat Persistence: None observed

## Neighborhood Context

• Subnet: 43.229.90.0/24
• Total Siblings: 3 (including target)
• Abuse Density: 0
• Neighbor Risk: 2 low-risk IPs (43.229.90.40, 43.229.90.60)
• Classification: Clean

## Observation History

18 signals observed with mixed geolocation data. Recent observations show:

• 07-27 09:32: India geolocation (Thrissur, Kerala)
• 07-27 09:33: Subnet classification (clean)
• 07-27 09:35: India geolocation (multi-signal inference)

## Recommended Actions

Based on risk score 40 and geolocation inconsistency:

Immediate Mitigation:

```bash

# iptables

iptables -A INPUT -s 43.229.90.73 -j DROP

```

Cloud/WAF Rules:

• Cloudflare WAF: Block IP with expression `ip.src eq 43.229.90.73`
• AWS WAF: Add address `43.229.90.73/32`
• NGINX: `deny 43.229.90.73;`

## Intelligence Assessment

This IP represents a dynamic ISP address with moderate risk primarily due to geographic inconsistency. The APNIC registration with US geolocation data suggests potential misconfiguration or routing anomalies. No active malicious activity detected. Monitor for changes in geolocation consistency or emergence of threat indicators. The clean subnet environment (0 abuse density) suggests this is likely a legitimate but inconsistently resolved ISP address.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.