38.183.115.110📋 Copy

# IP Intelligence Briefing: 38.183.115.110/32

Date: Current

Classification: Low Risk

Risk Score: 25/100

---

## Executive Summary

IP address 38.183.115.110 is a low-risk endpoint owned by NETCOM PLUS, C.A (ASN 269749) within the NETCOM-PLUS-CGNT-NET-2 network block (38.183.112.0/21). The IP shows no active threat indicators, no open services, and demonstrates stable operational characteristics over the observation period.

---

## Ownership and Network Context

• Organization: NETCOM PLUS, C.A
• ASN: 269749
• Network: NETCOM-PLUS-CGNT-NET-2
• CIDR Block: 38.183.112.0/21
• Geolocation: US, MA (Boston) — with one historical observation reporting Venezuela (Valencia, Carabobo), indicating potential geolocation inconsistency or multi-region deployment

---

## Threat Assessment

Threat Indicators: None detected

• Blacklist entries: 0
• Known attacker: No
• Tor exit node: No
• Spam source: No
• Known campaigns: None correlated

Network Role: Firewalled / No Services

• Open ports: 0
• TLS certificate: None detected
• HTTP service: None detected

Control Plane:

• DNSSEC: Valid
• Route stability: Inconsistent (isRouteStable: false)
• DNSBL listed: 1 of 8 total lists (minimal operator score: 0.1304)

---

## Historical Observations

16 signals observed across the observation period. Key findings:

• Classification: Consistently "clean"
• Abuse density: 0
• Threat persistence: None
• Ownership changes: 0
• No persistent malicious activity detected

One observation recorded geolocation at Valencia, Carabobo, Venezuela (SA), while primary geolocation indicates US, MA — suggesting the IP may serve multiple geographic regions or exhibit geolocation inconsistency.

---

## Neighborhood Analysis

Subnet: 38.183.115.0/24

• Total siblings: 3
• Active siblings: 1
• Threat siblings: 0
• Abuse density: 0 (clean classification)

Neighbor IPs:

• 38.183.115.113: Risk Score 25, Authority Score 50
• 38.183.115.123: Risk Score 25, Authority Score 50

The /24 subnet demonstrates low abuse density and no elevated risk indicators among sibling addresses.

---

## DNS Intelligence

• PTR Hostnames: host110.online-plus.com
• Forward Resolution: 1 hostname (host110.online-plus.com)
• Domain: online-plus.com
• Email Auth: SPF record present, DMARC absent

---

## Recommended Actions

No specific firewall or blocking actions recommended at this time. The IP exhibits low-risk characteristics with no active threat indicators.

Suggested Monitoring:

• Continue monitoring for service announcements (current state shows no open ports)
• Watch for geolocation consistency patterns
• Monitor for any changes in DNS resolution or email authentication records

---

## Conclusion

IP 38.183.115.110 represents a low-risk endpoint with no current threat indicators. The absence of open services, combined with a clean neighborhood profile and lack of blacklist entries, supports continued monitoring without immediate remediation actions. The geolocation inconsistency warrants periodic verification but does not elevate the risk posture at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.