190.24.56.107📋 Copy

# IP Intelligence Briefing: 190.24.56.107

Classification: Moderate Risk

Date of Analysis: 2026-07-22

Assigned By: IPDebrief Intelligence Platform

## Executive Summary

IP 190.24.56.107 is a residential/static endpoint in the Colombian ISP ETB network (ASN 19429) with a moderate risk score of 40. The address is geolocated to Bogotá, Colombia, and resolves to a static endpoint hostname (static-190-24-56-107.static.etb.net.co). No active threat indicators, open ports, or malicious campaign associations detected. Subnet abuse density is zero with no threat siblings observed.

## Ownership and Network Classification

## Geolocation Consistency

Multiple signal sources confirm consistent geolocation to Bogotá, Colombia (4.69°N, -74.03°W). Timezone: America/Bogota. Geovalidation shows plausible location with confidence score 0.52–0.85 across observation timestamps.

## Threat Indicators

## Observed Signals

Sixteen historical observations recorded since 2026-07-22. Signals include:

• Multi-signal inference geolocation (confidence 0.52)
• MaxMind GeoLite2 city match (confidence 0.70)
• Operator score classification: "Basic" (score 0.2609)
• Subnet classification: "Clean" (confidence 0.40)

No threat persistence days observed. No ownership changes.

## Network Relationships

DNS resolution confirmed to static-190-24-56-107.static.etb.net.co. No certificate associations, no related malicious entities, and no cross-network relationships detected.

## Neighborhood Analysis

Subnet 190.24.56.0/24 classified as clean with:

• Abuse Density: 0
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings: 1

## Recommended Actions

While risk score is moderate (40), the following defensive controls are recommended:

Firewall Rules:

• iptables: `iptables -A INPUT -s 190.24.56.107 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 190.24.56.107 drop`
• Cloudflare WAF: Block with expression `ip.src eq 190.24.56.107`
• AWS WAF: Address `190.24.56.107/32`

Assessment Notes:

• Risk score of 40 indicates moderate concern but no active exploit indicators
• Subnet shows zero abuse density; low likelihood of coordinated activity
• Residential/static endpoint suggests consumer ISP usage rather than infrastructure compromise
• No services open on this IP; likely end-user device

## Intelligence Confidence

High – Multiple corroborating geolocation signals, clean neighborhood data, and absence of threat indicators support classification as a benign residential/static endpoint with moderate baseline risk due to geographic region and ISP profile.

---

*Data compiled from IPDebrief intelligence platform. Recommendations should be validated against operational context before implementation.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.