188.26.221.203📋 Copy

IP INTELLIGENCE BRIEFING: 188.26.221.203

OVERVIEW

The IP address 188.26.221.203 was classified as Moderate Risk with a risk score of 50. The address is geolocated to Barcelona, Catalonia, Spain (coordinates: 41.38°N, 2.14°E) under timezone Europe/Madrid.

OWNERSHIP AND NETWORK CLASSIFICATION

The address operates under ASN 57269 with origin BGP prefix 188.26.216.0/21. Route stability issues were detected (isRouteStable: false). The address is not classified as a cloud, CDN, VPN, proxy, Tor exit node, or hosting provider. Service purpose was identified as "Firewalled / No Services" with no open ports detected during scanning.

DNS AND RESOLUTION

Reverse DNS resolution returned static-188-26-221-203.digimobil.es. Forward resolution confirmed the hostname digimobil.es with one forward resolution. Email authentication records indicate SPF and DMARC presence on the associated domain.

THREAT INDICATORS

The IP maintained zero blacklist entries in threat indicators at the time of assessment, though DNSBL listings showed 2 listings across 8 total lists. No known campaigns, attacker indicators, or spam source classifications were associated with the address. The address was not identified as a Tor exit node or known attacker.

CONTROL PLANE AND ROUTING

The control plane assessment showed 0 route changes over 30 days. DNSSEC validation was confirmed as valid. RPKI state and IRR consistency data were unavailable. Operator score was 0.1304 with an operator label of "Minimal."

TEMPORAL ANALYSIS

Ownership changes recorded: 0. Threat persistence days: 0. The address was not flagged as persistently malicious.

NEIGHBORHOOD ASSESSMENT

The /24 subnet (188.26.221.0/24) showed zero neighbors in the database, with abuse density rated at 0. No threat siblings were identified in the neighborhood.

OBSERVATION HISTORY

Eleven signal observations were recorded. The most recent observations occurred on 2026-07-30. Geolocation signals consistently identified Barcelona, Spain with high confidence (0.70). DNSBL listing signals showed high confidence (0.85) with 2 total listings. ICMP validation failed with "ICMP blocked - unable to validate" status, though geovalidation was plausible.

RELATIONSHIPS

Two DNS association relationships were identified, both linking to static-188-26-221-203.digimobil.es.

RECOMMENDED ACTIONS

Based on the risk profile, blocking recommendations were generated across multiple security platforms. The IP address should be blocked in firewall rules.

ASSESSMENT SUMMARY

The IP address 188.26.221.203 presents moderate risk with no active threat indicators. While DNSBL listings were detected, the address shows no evidence of malicious activity. The lack of open services and firewalled status suggests this may be a residential or edge infrastructure IP. SOC analysts should monitor for any changes in risk profile or emergence of threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.