189.28.82.83📋 Copy

# IP Intelligence Briefing: 189.28.82.83/32

## Executive Summary

IP address 189.28.82.83 presents as a low-risk endpoint with no active threat indicators. The address belongs to administrative IP broker infrastructure under ASN 27882 (admin-ipbroker), registered through LACNIC. Current risk assessment scores 25/100, classified as "Low Risk" with minimal operator reputation (0.1304). No malicious campaigns, blacklist entries, or attack patterns have been observed.

## Ownership and Registration

• ASN: 27882 (admin-ipbroker)
• Network Name: BO-TIGO-202304-02
• CIDR Block: 189.28.80.0/20
• RIR: LACNIC
• Abuse Contact: Available via RDAP protocol

## Geolocation Assessment

Geolocation data presents inconsistencies requiring contextual interpretation. Primary profile indicates Spain (ES) with coordinates 40.46, -3.75, while historical observations associate the address with Bolivia (BO), Cochabamba (-17.3822, -66.1518). Both sources share the same timezone (Europe/Madrid). Resolution accuracy radius spans 500 km. The 500 km accuracy threshold suggests these geolocation claims are inferred rather than definitively confirmed.

## Threat Indicators

• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Threat Feeds: None detected
• Campaign Association: No known campaigns
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• DNSBL Listings: 1 of 8 total lists

## Network Classification

• Infrastructure Type: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Service: None
• Connection Type: Not classified
• Provider/Hosting/CDN/VPN: All false

The address exhibits no active service indicators. Reverse DNS resolves to LPZ-189-28-82-00083.tigo.bo with forward confirmation, but the domain lacks SPF and DMARC authentication records.

## Neighborhood Analysis

The /24 subnet (189.28.82.0/24) contains three neighboring IPs:

Subnet abuse density: 0. All neighbors show low-risk profiles with no high-risk classifications. This indicates the IP block is not a concentration point for malicious activity.

## Historical Observations

Fifteen observations recorded with variable confidence levels (0.30–0.85). Key temporal signals include:

• Ownership stability: No ownership changes detected
• Threat persistence: 0 days
• Threat observation count: 0
• Geographic consistency: Inconsistent (ES/BO)
• Operator score: 0.1304 (Minimal)

The absence of threat observation count suggests no persistent malicious behavior has been attributed to this address.

## Recommended Security Actions

No specific firewall or blocking rules are recommended at this time. The low-risk classification (25/100) with no active threat indicators suggests standard monitoring practices are sufficient. However, geolocation inconsistencies warrant continued observation for any behavior changes.

## Intelligence Assessment

This IP address represents administrative or infrastructure-level addressing rather than active service endpoints. The lack of open ports, combined with low risk scores and no threat indicators, suggests benign usage. However, the geolocation discrepancies between Spain and Bolivia assignments should be noted for potential investigation if this IP appears in suspicious traffic patterns. No immediate mitigation action is required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.