189.90.239.143📋 Copy

# IP Intelligence Briefing: 189.90.239.143/32

Classification: Low Risk / Residential Endpoint

Date: 2026-07-29

Prepared For: SOC Operations Team

---

## Executive Summary

IP address 189.90.239.143 is classified as a low-risk residential endpoint associated with Brazilian ISP ISUPER TELECOMUNICACOES INFO LTDA. Current risk score is 15 with no active threat indicators detected. The IP demonstrates residential network characteristics and maintains minimal threat posture.

---

## Ownership and Registration

---

## Geolocation Profile

---

## Network Classification

• Primary Classification: Residential Endpoint
• Infrastructure Type: Residential
• ISP: ISuper Telecomunicações
• Network Role: Residential Endpoint (non-infrastructure)

---

## Threat Assessment

Current Risk Profile

• Risk Score: 15
• Reputation: Low Risk
• Abuse Confidence Score: Not applicable
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False

Threat Indicators

• Blacklist Count: 0
• Threat Feeds: None
• Known Campaigns: None
• Campaign Likelihood: None

Control Plane Observations

• DNSBL Listed: 1 of 8 total lists
• Route Stability: Unstable (not isRouteStable)
• BGP Prefix: 189.90.238.0/23
• Operator Score: 0.1304 (Minimal)

---

## DNS Analysis

---

## Network Neighborhood Analysis (189.90.239.0/24)

Notable Neighbor IPs

---

## Historical Observations (Last 20 Signals)

Recent activity observed 2026-07-29:

• Geolocation signals: Multi-signal inference from Brazil, Paraná region
• Network scans: Ports scanned, no service banners detected
• ICMP validation: Blocked (unable to validate)
• Geo Plausibility: Validated with 2500km accuracy radius
• Threat Persistence: 0 days observed

---

## Relationships Graph

• Network Associations: 4 entries (network 455011)
• DNS Associations: 4 entries (143-239-90-189.isuper.com.br)

---

## Recommended Security Actions

---

## Intelligence Assessment

The target IP 189.90.239.143 presents as a legitimate residential endpoint with minimal threat indicators. Key observations:

1. Low Risk Profile: Risk score of 15 with no active threat indicators

2. Residential Nature: Confirmed residential classification with residential ISP

3. Clean Threat Posture: No blacklist entries, no known attacker associations

4. Stable Ownership: No ownership changes recorded

5. Subnet Context: Neighbor analysis shows elevated risk on 4/6 sibling IPs (scores 40-55), suggesting potential localized residential abuse patterns

Recommendation: Continue monitoring without immediate mitigation. The IP demonstrates standard residential endpoint behavior. Consider contextual threat intelligence for the broader /24 subnet given 4 medium-risk neighbors.

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.