43.242.119.242📋 Copy

IP Intelligence Briefing: 43.242.119.242

Last Observed: 2026-06-10

---

**1. Core Profile**

• Risk Score: 65 (Moderate Risk)
• Ownership: Registered to Rutul Shah (ASN 45916, GujaratKutchNetwork, APNIC).
• Geolocation: Ahmedabad, Gujarat, India (23.03°N, 72.59°E).
• Threat Indicators: No malicious activity detected (no malware, C2, or exploit signs).
• Network Role: Firewalled / No Services (no open ports, TLS, or HTTP services).
• DNS: No PTR records, SPF/DKIM/DMArc misconfigurations, or hosted domains.

---

**2. Threat Observations**

• DNSBL Listings (8 total):

- High-severity listings (e.g., Spamhaus, Project Honey Pot).

- Resolved June 10, 2026.

• DNSSEC Validation: Validated, but no CAA records.
• Risk Trends:

- Minimal risk score (0.15) from DNSSEC analysis.

- No persistent malicious activity (0 threat observations in 30 days).

---

**3. Network Relationships**

• Shared Network: Part of GUJARATKUTCHNETWORK (ASN 45916).
• Neighbors:

- 43.242.119.230 (risk score 25, low risk).

- Subnet abuse density: 0% (no malicious siblings).

---

**4. Actionable Insights**

• SOC Recommendations:

- Monitor for DNSBL re-listings or unexpected network changes.

- Investigate GUJARATKUTCHNETWORK for broader abuse patterns.

- Consider blocking the IP if it reappears in threat feeds.

• Firewall Rules:

- Block `43.242.119.242/24` to mitigate potential spoofing or subnet-level threats.

---

Conclusion: This IP is registered to a local entity in India with no direct malicious indicators. However, its presence in multiple DNSBLs suggests it may be part of a compromised network. Continuous monitoring is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.