200.24.196.200
IP INTELLIGENCE BRIEFING: 200.24.196.200/32
---
**EXECUTIVE SUMMARY**
IP 200.24.196.200 presents a mixed threat profile with a low-risk reputation score (25/100) but exhibits concerning geolocation inconsistencies and DNSBL listings requiring SOC attention. The address is associated with ASN 19114 and has been observed with conflicting geographic data.
---
**NETWORK OWNERSHIP & INFRASTRUCTURE**
- ASN: 19114 (OTECEL S.A.)
- Organization: TEKLINK NETWORKS CIA.LTDA. / Otecel S.A., EC
- CIDR Block: 200.24.196.192/28
- RIR: LACNIC (Latin America)
- Registration: 2000-11-15 (legacy allocation)
- Network Classification: Firewalled / No Services Detected
---
**GEOLOCATION ANALYSIS**
⚠️ CRITICAL DISCREPANCY IDENTIFIED
- Profile Data: United States, New York, NY
- Historical Observations: Ecuador, Guayaquil
- Consensus: False (2 geo sources disagree)
- Implication: This geographic inconsistency warrants investigation for potential spoofing or misattribution
---
**THREAT INDICATORS**
- Risk Score: 25 (Low Risk)
- Abuse Confidence Score: Not Available
- Blacklist Status:
- Total Lists: 8
- Listed Count: 1
- Maximum Severity: HIGH
- Threat Classifications:
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Campaign Correlation: 0 matching campaigns
---
**DNS & EMAIL REPUTATION**
- PTR Resolution: Failed (no reverse DNS)
- Forward Resolution: Failed (no forward DNS)
- Hosted Domains: 0
- Email Authentication:
- SPF: Not configured
- DMARC: Not configured
- DNSSEC: Valid
- DNSBL Listings: 1 active listing out of 8 potential lists
---
**SERVICE FINGERPRINTING**
- Open Ports: None detected (firewalled)
- HTTP/HTTPS: No services responding
- TLS Certificates: None
- Banner Grabbing: No responses captured
- Implication: Either legitimately passive or actively blocked
---
**NETWORK BEHAVIOR**
- BGP Prefix: 200.24.192.0/20
- Route Stability: Unstable (0 route changes in 30 days)
- Hop Count: 15 (via Comcast transit)
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
---
**SUBNET ANALYSIS**
- Neighbor Count: 0 (no active siblings in /24)
- Abuse Density: 0
- Classification: Standard
- Inherited Risk: 0
---
**OBSERVATION HISTORY**
- Total Observations: 12
- Recent Activity: 2026-07-25
- Key Signals:
- Multiple threat pulses detected (3 pulses)
- One high-severity DNSBL listing
- Geolocation inconsistency confirmed across observations
- No persistent malicious behavior detected
---
**RECOMMENDED ACTIONS**
Immediate:
1. Monitor for geolocation spoofing attempts due to US/Ecuador discrepancy
2. Verify if DNSBL listing requires removal
3. Confirm whether address is legitimately firewalled or blocked
Short-term:
1. Add to watchlist for future geolocation changes
2. Monitor subnet 200.24.192.0/20 for related activity
3. Consider blocking if operational context indicates malicious use
Long-term:
1. Investigate ownership discrepancy (TEKLINK vs Otecel)
2. Correlate with other IPs in ASN 19114
3. Assess if firewalled state is legitimate or evasion technique
---
**RISK ASSESSMENT**
Overall Risk: LOW-MEDIUM (25/100)
While the IP does not exhibit active attack patterns, the geolocation inconsistency, DNSBL listing, and route instability suggest potential misattribution or infrastructure issues that warrant continued monitoring. No immediate blocking recommended, but maintain awareness of observed anomalies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | TEKLINK NETWORKS CIA.LTDA. |
| ASN | AS19114 |
| Network Name | 200.24.196.192 - 200.24.196.207 |
| CIDR Block | 200.24.196.192/28 |
| RIR | LACNIC |
| Country | EC |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS19114 |
| Network Prefix | 200.24.192.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 07:24:08 UTC |
| Last Seen | 2026-08-27 03:20:59 UTC |
| Profile Built | 2026-08-29 06:16:39 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 16 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 200.24.196.200
Who owns the IP address 200.24.196.200?
200.24.196.200 is registered to TEKLINK NETWORKS CIA.LTDA.. The address falls within the 200.24.196.192/28 network block. Registration is held at LACNIC.
Where is 200.24.196.200 located?
Geolocation data places 200.24.196.200 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 200.24.196.200 malicious or safe?
200.24.196.200 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.