43.230.92.34📋 Copy

# IP Intelligence Briefing: 43.230.92.34/32

Date: 2026-07-27

Classification: Low Risk Infrastructure

Risk Score: 0/100

## Executive Summary

IP 43.230.92.34 is a low-risk infrastructure address belonging to ASN 140900 (IRT-EBONE1-PK) within the 43.230.92.0/24 CIDR block. The address shows no active services, no threat indicators, and maintains a clean reputation profile. Recommended security posture: no blocking required at this time.

## Network Profile

## Threat Assessment

Current Risk Indicators

• Threat Indicators: None detected
• Blacklist Status: Not listed (0/8 DNSBL checks)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: N/A

Network Behavior

• Open Ports: None detected
• Active Services: None
• TLS/HTTP: No services responding
• DNSSEC: Valid
• PTR Record: static-34-92-230-43.ebonenet.com
• Forward Resolution: Confirmed (1 hostname)

## Neighborhood Analysis

Subnet: 43.230.92.0/24

• Total Siblings: 12
• Active Siblings: 2
• Threat Siblings: 1
• Abuse Density: 8.33%
• Subnet Classification: Mostly Clean

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 1 (43.230.92.46 - Risk Score: 50)
• Low Risk: 10

Notable neighbors include 43.230.92.39 (Risk: 25), 43.230.92.46 (Risk: 50), and 43.230.92.47 (Risk: 25). The majority of the subnet maintains low-risk profiles.

## Historical Observation

Observation Count: 14 signals recorded

Recent observations indicate:

• ASN 140900 registration (APNIC, allocated 2015-02-04)
• DNSSEC validation confirmed
• Abuse density consistent at 8.33%
• No persistent malicious behavior detected
• Threat observation count: 0

## Relationships

## Recommended Actions

Current Recommendation: NO ACTION REQUIRED

The IP address presents minimal threat risk and should be allowed through standard security controls. No firewall rules or blocking recommendations are warranted based on current risk assessment.

## SOC Analyst Notes

1. Infrastructure Classification: This address is classified as "Firewalled / No Services," indicating it does not host publicly accessible applications or services.

2. Subnet Context: The parent subnet (43.230.92.0/24) shows low abuse density (8.33%) with only 1 of 12 siblings flagged as threats.

3. Geographic Discrepancy: While geolocation shows France (Marseille), the ASN is registered under APNIC (Asia Pacific), suggesting possible multi-region infrastructure deployment.

4. Monitoring Priority: LOW - No active threat indicators or suspicious behavior observed.

Final Assessment: This IP address represents benign infrastructure with no immediate security concerns. Standard allow policies apply.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.