152.204.204.89📋 Copy

# IP Intelligence Briefing: 152.204.204.89

Classification: Residential Endpoint / Low Risk

Date of Analysis: 2026-07-25

---

## Executive Summary

IP address 152.204.204.89 is classified as a residential endpoint originating from Colombia (BOGOTA). The address demonstrates a low risk profile with a risk score of 25/100. While the IP is not associated with known campaigns or persistent malicious activity, minor threat indicators were observed in recent signal history. The address is part of a clean subnet with no neighboring threats.

---

## Ownership and Network Context

• ASN: 3816 (COLOMBIA TELECOMUNICACIONES S.A. ESP BIC)
• Network Block: 152.204.0.0/15
• Organization: COLOMBIA TELECOMUNICACIONES S.A. ESP BIC
• Geolocation: Colombia, BOGOTA, Quindío Department
• Network Role: Residential Endpoint
• Classification: Non-proxied, non-CDN, non-cloud infrastructure

---

## Threat Assessment

The IP carries minimal threat indicators. One DNSBL listing was observed but does not indicate widespread abuse. No associations with active threat campaigns were identified.

---

## Historical Observation Summary

Thirteen signal observations were recorded. Key findings:

• Recent observation (2026-07-25T05:12:20) from AlienVault OTX showed threat indicators with 0.75 confidence
• Subnet classification remained "clean" across neighborhood assessments
• No persistent malicious behavior detected
• No ownership changes observed

The IP does not exhibit signs of being a persistent threat actor.

---

## Neighborhood Analysis

Subnet: 152.204.204.89/24

• Abuse Density: 0% (Clean)
• Total Siblings: 1
• Active Threat Siblings: 0
• Risk Distribution: No high or medium risk neighbors detected

The /24 subnet shows no elevated abuse activity.

---

## Technical Observations

• DNS: No PTR hostnames, no forward resolution detected
• Services: No open ports detected
• TLS/HTTP: No TLS certificate, no HTTP title captured
• Route Stability: Route changes detected (not stable)
• RPKI/Irr: No RPKI validation data, IRR consistency unavailable

---

## Recommended Actions

Based on the low risk profile and residential classification:

1. Allow Traffic: No blocking recommended for this IP

2. Monitor: Standard monitoring applies

3. Context: The IP represents legitimate residential traffic from Colombia

4. DNSBL Check: Investigate the single DNSBL listing if traffic patterns warrant scrutiny

---

## Intelligence Conclusion

IP 152.204.204.89 is a benign residential address from Colombia with no active threat associations. The single DNSBL listing warrants awareness but does not indicate malicious activity. No firewall rules or blocking actions are recommended. The IP should be treated as legitimate residential traffic with standard network security monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.