188.75.191.104📋 Copy

# IP Intelligence Briefing: 188.75.191.104

## Executive Summary

IP address 188.75.191.104 is classified as High Risk (risk score: 80/100) based on IPDebrief intelligence. The IP is assigned to Jakub Peterka (ASN 196735) under network identifier CZ-JON-MASTER-NAT-1 and geolocates to Poděbrady, Central Bohemia, Czech Republic. Despite the elevated risk score, the IP shows no active service exposure and has no observable malicious indicators in current threat feeds.

---

## Ownership and Network Classification

• ASN: 196735
• Organization: Jakub Peterka
• Network Name: CZ-JON-MASTER-NAT-1
• CIDR Block: 188.75.191.0/24
• RIR: RIPE
• Registration Type: Residential NAT (inferred from "-static" DNS naming convention)

---

## Geolocation Intelligence

• Country: Czech Republic (CZ)
• Region: Central Bohemia
• City: Poděbrady
• Coordinates: 49.82°N, 15.47°E
• Timezone: Europe/Prague
• Geo-Consensus: Confirmed across multiple sources

---

## Threat Indicators and Risk Factors

Elevated Risk Factors Identified:

• Listed on 4 of 8 DNS blacklists checked
• Route stability flagged as unstable (isRouteStable: false)
• Operator score: 0.1304 (Minimal)
• Risk score: 80/100

Negative Indicators:

• No open ports detected
• No active TLS certificates
• No HTTP services running
• No threat indicators in current feeds
• No known attacker reputation
• Not identified as Tor exit, VPN, proxy, or CDN

Positive Indicators:

• DNS reverse resolution confirmed: 104-191-75-188-static.jon.cz
• SPF and DMARC records present on associated domain (jon.cz)
• No observed threat persistence

---

## Network Neighborhood Analysis

• Subnet: 188.75.191.0/24
• Abuse Density: 0%
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings: 0

No neighboring IPs flagged in the same /24 subnet.

---

## Relationship Graph

The IP maintains associations with:

• Network: CZ-JON-MASTER-NAT-1
• Hostnames: 104-191-75-188-static.jon.cz (DNS association)

---

## Observation History

18 observations recorded. Recent signals confirm:

• Consistent Czech Republic geolocation
• No ownership changes detected
• No persistent malicious activity observed
• Residential/non-cloud network role confirmed

---

## Recommended Security Actions

Priority: Critical (Risk Score 80/100)

Immediate Actions:

1. Increase logging verbosity for traffic from this IP

2. Review recent activity logs for this source

3. Implement blocking per firewall rules below

Firewall Rules:

• iptables: `iptables -A INPUT -s 188.75.191.104 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 188.75.191.104 drop`
• nginx: `deny 188.75.191.104;`
• pfSense: Add to firewall blacklist
• Cloudflare WAF: Block with expression `ip.src eq 188.75.191.104`
• AWS WAF: Add address `188.75.191.104/32` to whitelist/deny list

---

## Analyst Notes

While the elevated risk score (80/100) suggests caution, the IP's residential NAT designation, clean service profile, and zero observed threats in current feeds indicate this may be a false positive driven by DNS blacklist presence and routing anomalies. Recommend correlating with internal traffic logs before implementing permanent blocking measures. Monitor for any behavioral changes in associated activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.