190.56.195.23📋 Copy

# IP Intelligence Briefing: 190.56.195.23

## Executive Summary

The target IP address 190.56.195.23/32 is classified as a low-risk residential endpoint with no active threat indicators. All risk scores remain at zero across provider, authority, and stability metrics. The IP belongs to TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA (ASN 14754) within the 190.56.128.0/17 CIDR block.

## Network Ownership and Classification

• ASN: 14754
• Organization: TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA
• CIDR Block: 190.56.128.0/17
• RIR: LACNIC
• Network Role: Residential Endpoint
• Infrastructure Type: Residential

## Geolocation Analysis

Geolocation data presents inconsistencies across observation sources:

• Primary Classification: New York, US (US-NY)
• Secondary Observations: Guatemala City, Guatemala (GT)
• GeoConsensus: False (2 sources, conflicting data)

This geographic discrepancy warrants monitoring but does not currently indicate malicious activity.

## Threat Intelligence Posture

• Risk Score: 0
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• Active Threats: None detected

The IP maintains a clean threat profile with no active threat indicators or campaign associations.

## Network Neighborhood Analysis

The /24 subnet (190.56.195.23/24) demonstrates clean network hygiene:

• Abuse Density: 0
• Subnet Classification: Clean
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings: 1

No neighboring IPs within the subnet show malicious activity.

## DNS and Service Profile

• PTR Hostname: 23.195.56.190.dynamic.intelnet.net.gt
• Forward Resolution: Confirmed (1 record)
• Open Ports: None detected
• TLS Certificate: Not configured
• HTTP Services: Not active
• Email Authentication: SPF/DMARC not configured

## Historical Observations

Analysis of 16 historical observations reveals consistent classification patterns:

• Recent Classification: Residential endpoint (confidence: 0.40)
• Organization: Consistently identified as TELECOMUNICACIONES DE GUATEMALA
• Threat Persistence: 0 days
• Ownership Changes: 0
• Network Stability: No significant changes observed

## Related Entities

The IP maintains relationships with:

• Network: 190.56.128.0 - 190.56.255.255
• DNS Hostname: 23.195.56.190.dynamic.intelnet.net.gt (repeated associations)

## Security Actions Assessment

No specific security actions are recommended at this time. The IP presents minimal threat profile consistent with legitimate residential infrastructure.

## Recommended SOC Actions

1. Monitor Geographic Inconsistencies: Track the US vs. Guatemala geolocation discrepancy over time

2. Baseline Traffic Patterns: Establish normal traffic characteristics for this residential endpoint

3. Subnet Correlation: Monitor the parent /17 block for any emerging threat patterns

4. No Blocking Required: Current threat profile does not warrant firewall blocking or IP reputation filtering

Intelligence Confidence: High

Last Updated: 2026-07-23

Classification: Low Risk / Residential Endpoint

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.