186.189.98.197📋 Copy

INTEL BRIEFING: 186.189.98.197/32

Classification: Moderate Risk (Score: 50/100)

Report Generated: [Current Date]

Analysis Type: Full Network Intelligence Profile

---

## EXECUTIVE SUMMARY

IP address 186.189.98.197 is assigned to WOM SpA (ASN 52341) in Santiago, Chile. The IP carries a moderate risk score of 50, primarily driven by DNSBL listings rather than active threat indicators. The endpoint is currently firewalled with no open services, and the surrounding /24 subnet demonstrates low abuse density. No persistent malicious campaigns have been observed.

---

## OWNERSHIP & GEOLOCATION

• Organization: WOM SpA
• ASN: 52341
• Network Block: 186.189.96.0/19 (186.189.96.0 - 186.189.127.255)
• Country: Chile (CL)
• Region: Santiago Metropolitan
• City: Santiago
• RIR: LACNIC
• Abuse Contact: ipadmin@wom.cl (available via RDAP)

---

## THREAT PROFILE

Current Risk Assessment: Moderate (50/100)

Threat Indicators: None detected

• No known attacker patterns
• No spam source classification
• No Tor exit node activity
• No active campaigns correlated

DNSBL Status: Listed on 2 of 8 monitored blacklists

• Operator Score: 0.1304 (Minimal)
• Route Stability: Not stable
• RPKI State: Not validated

Network Classification:

• Infrastructure Type: Firewalled / No Services
• No CDN, Cloud, VPN, Proxy, or Hosting services detected

---

## SERVICES & DNS

Open Ports: None detected

DNS Resolution:

• No PTR hostnames resolved
• No forward DNS resolution
• No email authentication records (SPF/DMARC)
• No hosted domains

Services: No active services, no TLS certificates, no HTTP endpoints

---

## NEIGHBORHOOD ANALYSIS

Subnet: 186.189.98.0/24

Abuse Density: 0 (Clean)

Neighbor Count: 1

Threat Siblings: 0

Active Threats in Neighborhood: None

---

## OBSERVATION HISTORY

Total Observations: 12

Time Range: Recent monitoring period

Key Historical Signals:

• Organization ownership consistently registered to WOM SpA
• Geographic attribution stable: Santiago, Chile
• No ownership changes detected
• No persistent malicious behavior observed
• Threat observation count: 0
• Persistently malicious flag: False

Confidence Levels: 0.30-0.95 across various signal types

---

## RELATIONSHIP GRAPH

External Relationships: 2

• Same Network: 186.189.96.0 - 186.189.127.255 (x2 entries)
• No relationships to hostnames, organizations, or certificates beyond network scope

---

## TRACEROUTE

Hop Count: 11

First Hop RTT: 0.2ms

Last Hop RTT: 144.8ms

Timed Out Hops: 2

Transit Networks: Comcast

---

## RECOMMENDATIONS

Action: Monitor / Block Based on Context

1. Firewall Rules:

- Block outbound connections from internal networks if this IP appears in logs

- Allow inbound only if this is an expected external service endpoint

2. Threat Response:

- No immediate action required for active threats

- Monitor for changes in DNSBL status or service activation

- Review correlation with known Chilean infrastructure if relevant

3. Investigation Notes:

- Low-risk endpoint in otherwise clean subnet

- Primary concern is DNSBL listing (2 of 8 lists)

- No active exploitation or attack patterns observed

- Recommend periodic re-scanning if this IP appears in incident logs

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.