200.118.80.102📋 Copy

# IP INTELLIGENCE BRIEFING: 200.118.80.102/32

Classification: Moderate Risk (Score: 40) | Status: Active Monitoring Required

---

## EXECUTIVE SUMMARY

IP 200.118.80.102 is a Colombian residential/cable IP address belonging to Telmex Colombia S.A. (AS10620). Current risk assessment indicates moderate risk with no active threat indicators. The IP shows no malicious activity, but DNSBL listings and route instability warrant defensive monitoring. No blocking is recommended unless additional threat signals emerge.

---

## OWNERSHIP & INFRASTRUCTURE

• Organization: Telmex Colombia S.A.
• ASN: 10620 (AS10620 - Telmex Colombia S.A.)
• Network Block: 200.118.0.0/17 (200.118.0.0 - 200.118.127.255)
• RIR: LACNIC | Registration: 2003-10-28
• Infrastructure Type: Firewalled / No Services (No open ports detected)
• Service Classification: Residential/Cable (Not CDN, Cloud, VPN, or Hosting)

---

## GEOSPATIAL PROFILE

• Country: Colombia (CO)
• Region: Bogotá D.C.
• City: Bogotá
• Coordinates: 4.57°N, 74.30°W
• Accuracy Radius: 800km
• GeoValidation: Consensus from multiple sources (geoPlausible: false)
• RTT: ~87ms from probe origin

---

## THREAT INDICATORS & REPUTATION

• Risk Score: 40/100 (Moderate)
• Abuse Confidence Score: Not available
• Blacklist Status: 2 of 8 DNSBL listings (non-critical)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None detected
• Threat Feeds: Empty

---

## NETWORK BEHAVIOR

• BGP Prefix: 200.118.80.0/22
• Route Stability: False (route changes detected)
• RPKI State: Not validated
• DNSSEC: Valid
• Open Ports: None detected
• TLS/HTTP: No certificates or banners
• PTR Hostname: dynamic-ip-cr20011880102.cable.net.co
• Forward Resolution: Confirmed (1 hostname)

---

## NEIGHBORHOOD ANALYSIS (200.118.80.0/24)

• Subnet Classification: Clean
• Abuse Density: 0
• Total Siblings: 5
• Active Siblings: 1
• Threat Siblings: 0
• Risk Distribution: 1 medium, 3 low, 0 high
• Notable Neighbors:

- 200.118.80.39: Risk 55 (elevated)

- 200.118.80.125: Risk 15 (low)

- 200.118.80.154: Risk 0 (clean)

- 200.118.80.173: Risk 0 (clean)

---

## OBSERVATION HISTORY (16 Total Signals)

Recent observations include:

• Geolocation Signals: Colombia (Bogotá) with 0.52 confidence
• DNSSEC Validation: Confirmed valid
• ASN Resolution: AS10620 - Telmex Colombia S.A. (CO)
• DNS Listings: 2 out of 8 total DNSBL lists
• Threat Persistence: 0 days (not persistently malicious)

---

## RELATIONSHIP GRAPH

• Network Associations: 200.118.0.0 - 200.118.127.255 (same /17 block)
• DNS Associations: dynamic-ip-cr20011880102.cable.net.co
• Correlated Entities: No external certificate matches or campaign correlations

---

## DEFENSIVE RECOMMENDATIONS

Current Action: Monitor (Risk Score 40 does not warrant immediate blocking)

Recommended Rules (implement only if additional threat signals observed):

```

# iptables

iptables -A INPUT -s 200.118.80.102 -j DROP

# nftables

nft add rule inet filter input ip saddr 200.118.80.102 drop

```

Neighborhood Watch: Monitor 200.118.80.39 (Risk 55) for potential coordinated activity.

---

## SOC ANALYST NOTES

This IP represents a legitimate residential/cable assignment from a major Colombian ISP. The moderate risk score reflects DNSBL listings and route instability rather than confirmed malicious activity. No immediate threat indicators present. Recommend correlation with internal threat data before implementing blocking measures. Continue monitoring for changes in reputation or neighborhood activity patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.