188.75.149.167📋 Copy

# IP Intelligence Briefing: 188.75.149.167

Classification: Low Risk / Residential Infrastructure

Date: 2026-07-29

Analyst: IPDebrief Intelligence Team

## Executive Summary

IP address 188.75.149.167 is classified as low risk (score: 25) with no active threat indicators. The endpoint belongs to a residential or small business customer network in Kolín, Czech Republic, operated under the Jonas Meduna organization. No malicious activity, blacklist listings, or suspicious behavioral patterns have been observed.

## Network Ownership & Registration

• ASN: 196735 (Jonas Meduna)
• Organization: Jonas Meduna
• Netname: CZ-JON-CUST-KO-19
• CIDR Block: 188.75.149.0/24
• RIR: RIPE (Europe)
• Geolocation: Kolín, Central Bohemia, Czech Republic (CZ)
• Coordinates: 49.82°N, 15.47°E

## Technical Profile

• Network Role: Firewalled / No Services Detected
• Open Ports: None detected
• DNS Resolution: 167-149-75-188-static.jon.cz
• Parent Domain: jon.cz
• Email Authentication: SPF and DMARC records present
• BGP Prefix: 188.75.149.0/24
• Route Stability: Not stable (route changes observed)

## Threat Indicators Assessment

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable
• Known Campaigns: None detected

## Neighborhood Analysis (188.75.149.0/24)

• Abuse Density: 0.0 (Clean)
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Subnet Classification: Clean

The IP resides in a subnet with minimal abuse activity and no correlated threats.

## Relationship Graph

• Network Associations: Multiple references to CZ-JON-CUST-KO-19
• DNS Associations: Hostname 167-149-75-188-static.jon.cz (multiple entries)
• No Cross-References: No connections to suspicious external entities detected

## Observation History (Last 20 Signals)

• Observation Count: 20
• Threat Persistence Days: 0
• Ownership Changes: 0
• Signal Types Monitored:

- Port scanning activity

- Ownership verification

- Geolocation inference (CZ, 49.82°N, 15.47°E)

- Subnet abuse classification

• Recent Activity: All observations from 2026-07-29
• Status: No persistent malicious behavior observed

## Recommended Actions

• Firewall Rules: No specific recommendations required
• Monitoring Level: Standard (no elevated risk)
• Threat Level: Low

## Intelligence Assessment

The IP 188.75.149.167 represents a legitimate residential or small business infrastructure endpoint. Key findings indicate:

1. Low Threat Profile: Risk score of 25 with no blacklist listings or threat indicators

2. Clean Neighborhood: Parent subnet shows zero abuse density and no threat siblings

3. Stable Ownership: No ownership changes detected; consistent organizational attribution

4. Standard DNS: Resolves to residential static hostname under jon.cz domain

5. No Active Services: Firewall configuration prevents service enumeration

6. Valid Email Auth: SPF and DMARC records present on parent domain

## SOC Analyst Guidance

• Allow/Block Decision: Permit traffic; no block action warranted
• Monitoring Priority: Low
• Investigation Required: None at this time
• Correlation Needs: No correlated IPs or campaigns identified
• Historical Risk Trend: No escalation detected; threat observation count remains at zero

---

*Data Source: IPDebrief Intelligence Platform*

*Report Generated: 2026-07-29*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.