143.255.141.221📋 Copy

# IP Intelligence Briefing: 143.255.141.221

## Executive Summary

IP 143.255.141.221 is a low-risk (score: 25) address assigned to GIG@NET SOCIEDAD ANONIMA (AS61512) in Paraguay. The asset shows no active services or current threat indicators, but exhibits historical DNSBL listings and geographic validation anomalies requiring monitoring.

## Asset Profile

• IP Address: 143.255.141.221/32
• ASN: AS61512 - GIG@NET SOCIEDAD ANONIMA
• Registration: ARIN (allocated 2015-12-02)
• Geolocation: Ciudad del Este, Alto Paraná Department, Paraguay (PY)
• PTR Hostname: 143-255-141-221.giganet.net.py
• Classification: Firewalled / No Services Detected

## Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not available
• Blacklist Status: Listed on 8 DNSBLs (high severity)
• Threat Indicators: None active
• Known Campaigns: None correlated
• Tor/Proxy/VPN: Not detected

## Anomalies & Indicators

1. Geographic Validation Failure: RTT measurements indicate 143ms against a minimum possible 210ms for the claimed geographic location (10,498.4km distance), marking the geolocation as implausible.

2. Historical DNSBL Listings: IP appears on 8 blacklist feeds with high severity classification during recent observations.

3. Stability Concern: Control plane shows unstable routing (isRouteStable: false), though operator score remains minimal (0.1304).

## Network Context

• Subnet: 143.255.140.0/23
• BGP Prefix: 143.255.140.0/23
• RPKI Status: Not validated
• Neighbor Analysis: No active siblings in /24 subnet; neighborhood classified as mostly_clean
• Relationship Graph: Multiple associations with parent network 143.255.140.0 - 143.255.143.255

## Service Enumeration

• Open Ports: None detected
• TLS Certificates: Not observed
• HTTP Banner: No services responding
• DNS Records: Single forward confirmation to PTR hostname

## Historical Observations

• Total Signals: 18 observations recorded
• Latest Activity: 2026-06-17T12:16:03 UTC
• Threat Persistence: 0 days (not persistently malicious)
• Ownership Changes: None recorded

## Recommended Actions

No immediate blocking recommendations generated due to low risk score (25). However, the following are advised:

1. Monitor DNSBL Activity: Track continued presence on 8 blacklist feeds

2. Validate Geolocation: Investigate RTT discrepancy for potential spoofing

3. Maintain Baseline: No active services detected; continue service enumeration

4. Review Historical Listings: Assess significance of high-severity DNSBL presence

## Conclusion

This IP represents a low-risk, residential or infrastructure asset with no current threat activity. The historical DNSBL listings and geographic validation failure warrant periodic review but do not necessitate immediate remediation. No firewall rules recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.