49.204.232.244
IP Intelligence Briefing: 49.204.232.244
Date: 2026-06-18
---
**1. Risk Profile**
- Risk Score: 80 (High Risk)
- Network Role: Residential (provider: IRT-CABLELITE-IN, ASN 131269)
- Geolocation: Coimbatore, Tamil Nadu, India (IN)
- Threat Indicators: No direct malicious activity detected in the last 30 days.
---
**2. Key Observations**
- DNS Associations:
- Linked to `broadband.actcorp.in` (SPF/DMARC configured, no email compromise detected).
- Services:
- Open ports: SSH (22/TCP), HTTPS-alt (8443/TCP).
- No TLS certificate or HTTP banner detected.
- Network Behavior:
- Subnet `49.204.232.244/24` shows no abuse density.
- Resides in a residential network with minimal routing instability.
---
**3. Threat History**
- Historical Listings:
- Listed in 4/8 DNSBLs (e.g., Spamhaus, OpenDNS) with "high" severity.
- No recent scans or exploitation attempts observed.
- Stability:
- Route stability score: 0.13 (minimal risk).
---
**4. Relationships & Context**
- Network Peers:
- Part of the same network as `ACTFIBERNET-Tarnaka` (residential subnet).
- Organizational Link:
- Registered to IRT-CABLELITE-IN (Indian ISP).
---
**5. Recommendations**
- Monitor DNSBL Status: Track the IP’s DNSBL listings for potential spam or phishing activity.
- Restrict SSH Access: Limit SSH (port 22) to trusted sources due to open access.
- Verify Hosting: Confirm if the IP is used for legitimate services (e.g., `actcorp.in`).
- Subnet Review: No immediate action needed for the subnet due to low abuse density.
---
Note: The IP’s high risk score may reflect historical data or network characteristics. No active threats detected in the last 30 days.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-CABLELITE-IN |
| ASN | AS131269 |
| Network Name | — |
| CIDR Block | — |
| RIR | APNIC |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | broadband.actcorp.in |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | broadband.actcorp.in |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Multi-Service Host |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| 8443 | https-alt | tcp | — |
| Closed Ports | 25, 80, 443, 3389, 8080 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 21% | 2 | 2 |
| Overall | 22% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:04:24 UTC |
| Last Seen | 2026-06-26 18:11:24 UTC |
| Profile Built | 2026-06-23 15:17:31 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.