190.109.97.214📋 Copy

# IP Intelligence Briefing: 190.109.97.214

## Executive Summary

IP address 190.109.97.214 presents a low-risk profile with no detected malicious activity. The IP belongs to a clean subnet with minimal abuse density and no threat indicators. No immediate defensive actions are required.

---

## Risk Assessment

---

## Technical Profile

Geolocation:

• Country: Brazil (BR)
• Region: Bahia
• City: Serrinha
• Coordinates: -14.24, -51.93 (2500km accuracy radius)

Ownership:

• ASN: 271222
• Organization: ROSICLEIDE LOMES LIMA
• CIDR Block: 190.109.97.0/24
• RIR: LACNIC

Network Classification:

• Role: Firewalled / No Services
• Infrastructure Type: Unknown
• Cloud/CDN/Proxy: No

---

## Threat Indicators

• Threat Feeds: Empty
• Known Campaigns: None
• Threat Persistence: 0 days
• Cert Matches: 0
• Banner Matches: 0

---

## Observations History

The IP has generated 13 observations across multiple signal types:

• Network Classification: Consistently classified as "clean" with 0 abuse density
• Geolocation Signals: Multiple consistent location signals pointing to Brazil
• Port Scans: Conducted but no open services detected
• DNS Resolution: No forward resolution records; PTR records absent
• ICMP Validation: Blocked - unable to validate geolocation

---

## Neighborhood Analysis

Subnet: 190.109.97.0/24

• Abuse Density: 0%
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 0
• Classification: Clean

Notable Neighbor: 190.109.97.100

• Risk Score: 25
• Authority Score: 50

---

## Control Plane Data

• BGP Prefix: 190.109.96.0/23
• Route Stability: False (route changes observed)
• RPKI State: Not validated
• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)

---

## Recommended Actions

No immediate defensive actions required. The IP presents no actionable threat indicators.

Monitoring Recommendations:

• Continue passive monitoring for any new threat indicators
• Monitor for changes in BGP route stability
• Watch for new blacklist appearances if risk profile changes

---

## Conclusion

IP 190.109.97.214 is a benign residential/infrastructure IP with no malicious behavior detected. The subnet exhibits clean classification with no abuse density. SOC teams may maintain standard logging without additional blocking or mitigation measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.