50.70.190.243📋 Copy

# IP Intelligence Briefing: 50.70.190.243/32

## Executive Summary

Risk Assessment: LOW RISK (Score: 25/100)

Classification: Residential/Enterprise Network Edge Device

Threat Status: No active indicators detected

---

## Network Ownership & Infrastructure

• Organization: Shaw Communications (Shaw Cablecom)
• ASN: 6327 (SHAW-COMM)
• CIDR Block: 50.64.0.0/13
• IP Block: 50.70.190.243/24 (no adjacent neighbors identified)
• Service Profile: Firewalled / No Services Detected

The IP address resolves to a Shaw Communications subscriber endpoint with no open ports or active services. The PTR record maps to `S0106bcd165666347.ls.shawcable.net`, indicating a residential or small business cable modem termination system.

---

## Threat Intelligence Indicators

• Threat Status: Clean

- Not a known attacker

- Not a Tor exit node

- Not flagged as spam source

- Blacklist count: 0

- Known campaigns: None

• Reputation Signals:

- Risk Score: 25 (Low Risk)

- Provider Score: 0

- Authority Score: 0

- DNSBL Listed: 1 of 8 total lists

---

## Geolocation Analysis

• Primary Location: Wawa, Ontario, Canada (Shaw Communications network data)
• Reported Country: IL (Israel)
• Geolocation Validation: VIOLATION — ICMP blocked, unable to validate
• Distance Discrepancy: 6,071.2 km from claimed coordinates
• Assessment: The geolocation data contains conflicting signals. While network registration data indicates Canadian origin, the geo-source consensus shows "geoConsensus: false" with "geoPlausible: true." The distance metric suggests the geolocation data may be stale or incorrectly attributed.

---

## DNS & Email Reputation

• PTR Hostname: S0106bcd165666347.ls.shawcable.net
• Reverse DNS: Forward confirmed
• Email Authentication: SPF and DMARC records present
• Hosted Domains: None
• Email Sender Score: Not applicable

---

## Historical Observations (16 Signals)

• Recent Ownership: Confirmed Shaw Communications assignment
• Operator Score: 0.2609 (Basic classification)
• Threat Persistence: 0 days (no persistent malicious activity detected)
• Ownership Changes: 0 (stable registration)

---

## Network Relationships

• DNS Associations: shawcable.net
• Network Association: SHAW-COMM (50.70.190.0/24)
• Related Entities: 2 hostnames, 1 network block

---

## Control Plane Assessment

• Route Stability: FALSE (BGP prefix 50.70.188.0/22 shows instability)
• RPKI State: Not verified
• IRR Consistency: Not verified
• Route Changes (30d): 0
• DNSSEC: Valid
• Hop Count: 30 (first hop RTT: 0.3ms, last hop RTT: 91ms)

---

## Recommended Actions

No immediate action required. This IP represents a legitimate Shaw Communications endpoint with no active threat indicators. The IP is firewalled with no open services, and all threat feeds report clean status.

Monitoring Considerations

• The geolocation discrepancy (claimed Israel vs. Canadian infrastructure) warrants periodic re-validation
• Route instability flags suggest monitoring for potential routing anomalies
• No firewall rules recommended based on current risk profile

---

## Conclusion

IP 50.70.190.243 is a low-risk residential/enterprise endpoint belonging to Shaw Communications. No malicious activity, threat indicators, or suspicious behavior have been observed. The IP can be safely permitted through standard security controls while maintaining routine monitoring for geolocation or routing anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.