190.104.114.250📋 Copy

# IP Intelligence Briefing: 190.104.114.250

Classification: Moderate Risk (Score: 55)

Date: Current Analysis

Status: Active Monitoring

---

## Executive Summary

IP 190.104.114.250 presents a moderate risk profile with no active threat indicators. The address belongs to Servicios Innovadores de Comunicación y Entretenimiento, S.A. (AS52362) and is deployed in New York, US. The IP is heavily firewalled with no open services detected, and the /24 subnet demonstrates low abuse density (0). No malicious campaigns or persistent threat activity observed.

---

## Ownership & Network Classification

• Organization: Servicios Innovadores de Comunicación y Entretenimiento, S.A.
• ASN: 52362
• CIDR Block: 190.104.112.0/20 (190.104.112.0 - 190.104.127.255)
• RIR: LACNIC
• Network Role: Firewalled / No Services
• Infrastructure Type: Not classified as CDN, cloud, proxy, VPN, or hosting

---

## Geolocation Data

• Country: US
• Region: US-NY
• City: New York
• Timezone: America/New_York
• Geo Validation: Plausible (9,195.9km distance from probe), ICMP validation blocked
• Risk: Moderate classification assigned

---

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Active Threat Feeds: None
• Campaign Matches: 0
• Correlated IPs: 0

---

## Network Services & DNS

• Open Ports: None detected (Firewalled)
• DNS PTR Hostnames: None
• Forward Resolution: Not confirmed
• Email Authentication: No SPF/DMARC records
• TLS Certificate: None
• HTTP Services: None active

---

## Control Plane Assessment

• BGP Prefix: 190.104.114.0/24
• Route Stability: Unstable
• MoAS Status: No
• DNSSEC Valid: Yes
• DNSBL Listed: 3 of 8 total lists

---

## Neighborhood Analysis (/24 Subnet)

• Subnet: 190.104.114.250/24
• Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0
• Risk Distribution:

- High Risk: 0

- Medium Risk: 0

- Low Risk: 1 (190.104.114.20, Risk Score: 25)

---

## Observation History (16 Records)

Recent observations indicate:

• Subnet Classification: Clean with 0 abuse density
• Ownership Stability: No changes recorded
• Threat Persistence: None observed
• Recent Activity: Port scanning detected on 2026-07-28 with no open services discovered
• Network Reachability: Limited (ICMP blocked)

---

## Recommended Actions

Firewall Rules:

```

# Allow established connections (if applicable)

# Block incoming unsolicited connections

iptables -A INPUT -i eth0 -p tcp --dport 22 -j DROP

iptables -A INPUT -i eth0 -p tcp --dport 80 -j DROP

iptables -A INPUT -i eth0 -p tcp --dport 443 -j DROP

```

Monitoring Priority: Low-Moderate

Alerting Threshold: Monitor for service activation or subnet-level abuse spikes

---

## Conclusion

IP 190.104.114.250 maintains a clean operational posture with no active threat indicators. The moderate risk classification (55) is primarily driven by the DNSBL listing count (3/8) and control plane instability rather than malicious activity. The /24 subnet demonstrates minimal abuse density with only one low-risk neighbor. No immediate defensive action required; continue standard monitoring practices.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.