190.107.209.205📋 Copy

# IP Intelligence Briefing: 190.107.209.205

## Executive Summary

IP 190.107.209.205 is classified as low-risk (score: 25) with no active threat indicators. The address is located in Managua, Nicaragua and belongs to subnet 190.107.209.0/24 (ASN 52468). The IP shows minimal operator activity with no open services detected.

## Geographic and Network Profile

• Location: Managua, Managua Department, Nicaragua (NI)
• Coordinates: 12.13°N, 86.25°W
• ASN: 52468
• BGP Prefix: 190.107.209.0/24
• Network Role: Firewalled / No Services
• Classification: Low Risk

## Threat Assessment

• Risk Score: 25 (Low)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 1
• DNSBL Listings: 1 of 8 total lists
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No

## DNS and Identity Information

• Reverse DNS: 205-209-107-190.ufinet.com.ni
• Forward Resolution: Confirmed (1 record)
• Domain: com.ni
• Email Authentication: No SPF or DMARC records detected
• Forward Hostnames: 205-209-107-190.ufinet.com.ni

## Services and Ports

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None

## Neighborhood Analysis (190.107.209.0/24)

• Abuse Density: 0 (Low)
• Subnet Classification: Low Risk
• Active Siblings: 2
• Neighbor IPs:

- 190.107.209.204 (Risk: 25, Authority: 50)

- 190.107.209.211 (Risk: 25, Authority: 50)

## Historical Observations

The IP has 11 recorded observations. Key signals include:

• Geolocation: Managua, Nicaragua (confidence: 0.70)
• DNS Data: Minimal operator activity (operator score: 0.1304)
• Threat Signals: One high-severity listing detected (confidence: 0.85)
• Recent Activity: HTTP 429 error observed (rate limiting)

## Recommended Actions

• Firewall Rules: None required (low-risk classification)
• Monitoring Level: Standard monitoring
• Block/Allow: No immediate action required

## Intelligence Narrative

IP 190.107.209.205 represents a minimal threat profile. The address is geolocated to Nicaragua and associated with the ufinet.com.ni domain infrastructure. No active services, open ports, or malicious behavior patterns were detected. The subnet exhibits low abuse density with two neighboring IPs showing similar low-risk profiles. The single DNSBL listing is minimal and does not indicate active exploitation. SOC teams may monitor for any changes in threat indicators but no immediate defensive actions are warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.