186.189.90.120📋 Copy

## IP Intelligence Briefing: 186.189.90.120/32

Classification: Moderate Risk (Risk Score: 40/100)

Analysis Date: 2026-07-28

Reporting Entity: IPDebrief Intelligence

---

Ownership & Geolocation

The IP address 186.189.90.120 is assigned to WOM SpA (ASN 52341), a Chilean telecommunications provider. The IP falls within the 186.189.80.0/20 CIDR block, allocated via LACNIC. Registered abuse contact is available through RDAP at ipadmin@wom.cl.

Geolocation: Reported as Santiago, Chile (CL). However, geolocation validation flagged a discrepancy—the RTT measurement of 139ms is inconsistent with the reported geographic distance of 12,116.5 km from the probe location, suggesting potential data inaccuracy.

---

Network Characteristics

The IP is classified as firewalled with no active services. Network scanning revealed no open ports, no TLS certificates, and no HTTP banners. DNS resolution failed to return PTR hostnames or forward resolutions. No hosted domains or email authentication records (SPF/DMARC) were detected.

Control Plane Data:

• Origin ASN: 52341
• BGP Prefix: 186.189.90.0/24
• Route stability: Inconsistent
• DNSSEC: Valid
• RPKI/Irr status: Not resolved

---

Threat Assessment

Current Threat Indicators: None detected. The IP is not flagged as a known attacker, spam source, Tor exit node, proxy, or cloud infrastructure.

Reputation Signals:

• Abuse confidence score: Not available
• Blacklist count: 0
• DNSBL listings: 2 of 8 total lists
• Operator score: 0.1304 (Minimal)
• Persistently malicious: No

Threat Persistence: Zero threat observation count; no evidence of persistent malicious activity.

---

Neighborhood Analysis

The /24 subnet (186.189.90.0/24) contains 7 sibling IPs with an abuse density of 0. Risk distribution within the subnet:

• High risk: 0
• Medium risk: 3
• Low risk: 3

Notable Neighbors:

Two siblings (186.189.90.38, 186.189.90.149) share the same elevated risk score of 55.

---

Historical Observations

Seventeen observations recorded over the monitoring period. Recent signals indicate consistent ownership attribution to WOM SpA and LACNIC LACNIC registration. No ownership changes or threat persistence patterns observed.

---

Recommended Security Actions

Firewall Recommendations:

```bash

# iptables

iptables -A INPUT -s 186.189.90.120 -j DROP

# nftables

nft add rule inet filter input ip saddr 186.189.90.120 drop

# NGINX

deny 186.189.90.120;

# pfSense

186.189.90.120/32

# Cloudflare WAF

{"description": "Block 186.189.90.120 — IPDebrief risk score 40", "action": "block", "filter": {"expression": "ip.src eq 186.189.90.120"}}

# AWS WAF

{"Addresses": ["186.189.90.120/32"], "Description": "IPDebrief risk 40"}

```

Assessment Notes:

• Risk score of 40 indicates moderate concern; blocking is recommended as a precautionary measure.
• No open services detected suggests the IP may be dormant or used for internal traffic.
• Neighboring IPs with higher risk scores (55) warrant monitoring for potential coordinated activity.
• DNSBL listings (2/8) indicate some reputation concerns despite lack of direct threat indicators.

---

Conclusion: 186.189.90.120 is a Chilean telecommunications IP with moderate risk classification. No active services or direct threat indicators detected. Recommended for blocking at perimeter controls. Monitor related subnet addresses (186.189.90.38, 186.189.90.149) for elevated risk patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.