# INTELLIGENCE BRIEFING: IP 181.33.185.104/32
## EXECUTIVE SUMMARY
IP 181.33.185.104 is a residential endpoint located in Colombia with a clean threat profile. The address shows no malicious indicators, threat persistence, or campaign associations. No defensive action is recommended at this time.
---
## 1. OWNERSHIP & ATTRIBUTION
| Field | Value |
|---|---|
| **ASN** | 3816 |
| **Organization** | COLOMBIA TELECOMUNICACIONES S.A. ESP BIC |
| **Network Block** | 181.32.0.0/15 |
| **RIR** | LACNIC |
| **CIDR Block** | 181.32.0.0 - 181.33.255.255 |
| **Abuse Contact** | Available via RDAP |
The IP belongs to Colombia Telecomunicaciones, a major Colombian telecommunications provider operating under LACNIC.
---
## 2. GEOLOCATION
| Field | Value |
|---|---|
| **Country** | Colombia (CO) |
| **Region** | Norte de Santander Department |
| **City** | Cúcuta |
| **Coordinates** | 4.57°N, -74.3°W |
| **Accuracy Radius** | 800 km |
| **Geo Source Count** | 1 |
| **Consensus** | True |
Geolocation data indicates placement in northern Colombia near the Venezuelan border.
---
## 3. THREAT ASSESSMENT
| Metric | Status |
|---|---|
| **Risk Score** | 0 (Low Risk) |
| **Provider Score** | 0 |
| **Authority Score** | 0 |
| **Abuse Confidence Score** | N/A |
| **Blacklist Count** | 0 |
| **Is Tor Exit** | False |
| **Is Known Attacker** | False |
| **Is Spam Source** | False |
| **Threat Observation Count** | 0 |
| **Is Persistently Malicious** | False |
| **Known Campaigns** | None |
| **Pulsedive Risk** | N/A |
The IP shows zero malicious indicators across all threat feeds and reputation sources.
---
## 4. NETWORK CLASSIFICATION
| Attribute | Classification |
|---|---|
| **Infrastructure Type** | Residential |
| **Connection Type** | Residential Endpoint |
| **Is Cloud** | False |
| **Is CDN** | False |
| **Is Proxy** | False |
| **Is Hosting** | False |
| **Is Mobile** | False |
| **Is Bogon** | False |
| **Is Anycast** | False |
| **Is VPN** | False |
| **Is Tor** | False |
No proxy, hosting, or anonymization services detected.
---
## 5. DNS & EMAIL AUTH
| Metric | Status |
|---|---|
| **PTR Hostnames** | None |
| **Forward Confirmed** | False |
| **Hosted Domains** | 0 |
| **SPF Record** | None |
| **DMARC Record** | None |
| **TXT Record Count** | 0 |
| **Forward Resolution Count** | 0 |
The IP does not resolve to any domain and has no email authentication records.
---
## 6. SERVICES & PORTS
| Metric | Status |
|---|---|
| **Open Ports** | None detected |
| **TLS Certificate** | None |
| **HTTP Title** | None |
| **Server Banner** | None |
No active services detected on the IP address.
---
## 7. CONTROL PLANE
| Metric | Value |
|---|---|
| **Origin ASN** | 3816 |
| **BGP Prefix** | 181.33.176.0/20 |
| **Route Stable** | False |
| **Operator Score** | 0.1304 (Minimal) |
| **DNSSEC Valid** | True |
| **DNSBL Listed** | 0 |
---
## 8. NEIGHBORHOOD ANALYSIS
| Metric | Value |
|---|---|
| **Subnet** | 181.33.185.104/24 |
| **Abuse Density** | 0 |
| **Classification** | Clean |
| **Inherited Risk** | 0 |
| **Total Siblings** | 1 |
| **Active Siblings** | 0 |
| **Threat Siblings** | 0 |
The /24 subnet shows no abuse activity and no neighboring threats.
---
## 9. OBSERVATION HISTORY
- Total Observations: 13
- Latest Observation: 2026-07-22T09:50:23+00:00
- Signal Types: Ownership, infrastructure classification, geolocation, network registration
- Trend: Stable residential classification with consistent Colombian origin
- Ownership Changes: 0
- Threat Persistence: 0 days
Observations confirm consistent residential endpoint classification with no escalation in threat signals.
---
## 10. RELATIONSHIPS
- Network Associations: 181.32.0.0 - 181.33.255.255 (same network)
- External Entity Links:
None detected.
---
## 11. CAMPAIGN ANALYSIS
| Metric | Value |
|---|---|
| **Campaign Likelihood** | None identified |
| **CERT Matches** | 0 |
| **Banner Matches** | 0 |
| **Correlated IPs** | 0 |
| **CERT Subjects** | None |
No campaign indicators or CERT activity associated with this IP address.
---
## 12. CONCLUSION & RECOMMENDATIONS
Threat Level: CLEAN
IP 181.33.185.104 represents a standard residential endpoint with no malicious indicators. The address belongs to a legitimate Colombian telecommunications provider and shows no association with known threat actors, malware campaigns, or abuse activity.
SOC Action Items:
1. No action required — The IP shows no threat indicators
2. Standard logging — Monitor as normal residential traffic
3. No blocking recommended — No threat justification for blocking
Intelligence Summary:
This IP is classified as a clean residential endpoint with zero observed malicious activity. The address has no blacklist presence, no campaign associations, and no elevated risk scores across all threat feeds. It should be treated as benign network traffic.
---
Report Generated: 2026-07-22
Classification: Operational Intelligence
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | COLOMBIA TELECOMUNICACIONES S.A. ESP BIC |
| ASN | AS3816 |
| Network Name | 181.32.0.0 - 181.33.255.255 |
| CIDR Block | 181.32.0.0/15 |
| RIR | LACNIC |
| Country | CO |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS3816 |
| Network Prefix | 181.33.176.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 23% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 16% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:21:18 UTC |
| Last Seen | 2026-08-28 05:27:20 UTC |
| Profile Built | 2026-08-29 03:08:09 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 181.33.185.104
Who owns the IP address 181.33.185.104?
181.33.185.104 is registered to COLOMBIA TELECOMUNICACIONES S.A. ESP BIC. The address falls within the 181.32.0.0/15 network block. Registration is held at LACNIC.
Where is 181.33.185.104 located?
Geolocation data places 181.33.185.104 in Cúcuta, Norte de Santander Department, Colombia. The local time zone is America/Bogota. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 181.33.185.104 malicious or safe?
181.33.185.104 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 181.33.185.104 a VPN, proxy, or data center address?
181.33.185.104 is classified as a residential network based on network ownership and behavioural analysis.