180.190.166.21
IP INTELLIGENCE BRIEFING
Subject: 180.190.166.21
Classification: Defensive Security Assessment
Date: 2026-07-26
---
## EXECUTIVE SUMMARY
IP 180.190.166.21 is a low-risk infrastructure address associated with IRT-GLOBET-PH (ASN 4775), operated within the Philippines Metro Manila region. The address shows no active threat indicators, no service exposure, and no historical malicious behavior. A single neighbor IP within the /24 subnet demonstrates elevated risk characteristics warranting monitoring.
---
## TECHNICAL PROFILE
- IP Address: 180.190.166.21/32
- Network: GBB-VISMIN-IP-POOL (180.190.128.0/18)
- ASN: 4775 (IRT-GLOBET-PH)
- Geolocation: Philippines (PH), Metro Manila, Caloocan
- Reputation Score: 0 (Low Risk)
- Risk Assessment: Minimal threat posture
---
## NETWORK CHARACTERIZATION
The address presents as a firewalled endpoint with no active service exposure:
- Open Ports: None detected
- DNS Resolution: No PTR records or forward DNS entries
- TLS/HTTP: No certificates, HTTP title, or server banners observed
- Network Classification: Infrastructure endpoint (not CDN, proxy, VPN, or Tor)
The IP falls under the broader BGP prefix 180.190.164.0/22 with stable routing characteristics.
---
## THREAT INTELLIGENCE
No active threat indicators identified:
- Blacklist Status: Not listed on any threat feeds
- Abuse Confidence Score: N/A (insufficient data)
- Known Campaigns: None detected
- Tor/Proxy Exit: Not a known exit node
- Spam Source: Not flagged as spam infrastructure
Control plane analysis shows minimal operator risk (0.1304) with DNSSEC validation enabled.
---
## OBSERVATION HISTORY
Historical analysis across 14 observations reveals consistent benign behavior:
- Timeframe: Data collected through 2026-07-26
- Risk Trend: Stable with no escalation patterns
- Geolocation: Consistent Philippines attribution (10,278 km validation distance)
- Signal Types: Network classification, geolocation inference, operator scoring
- Threat Persistence: None recorded
---
## NEIGHBORHOOD ANALYSIS
Subnet 180.190.166.0/24 assessment:
- Total Neighbors: 1 active sibling IP
- Subnet Abuse Density: 0 (clean)
- Risk Distribution: 0 High, 0 Medium, 1 Low
Notable Neighbor: 180.190.166.250
- Risk Score: 25
- Authority Score: 50
- Classification: Requires review for potential correlation
---
## RELATIONSHIP MAPPING
Three relationships identified, all internal to the same network pool (GBB-VISMIN-IP-POOL). No external associations to:
- Organizations outside ASN 4775
- Hostnames or domain infrastructure
- SSL certificates or public-facing services
---
## RECOMMENDED ACTIONS
Based on current risk profile, no immediate blocking is required. Monitor neighbor IP 180.190.166.250 for escalation.
Firewall Policy:
- Permit traffic (low-risk infrastructure)
- No specific block rules warranted
- Consider monitoring neighbor 180.190.166.250 if elevated activity observed
SOC Recommendations:
1. No immediate incident response actions required
2. Monitor neighbor IP 180.190.166.250 for risk score changes
3. Maintain current permit/allow posture for this address
4. Review if 180.190.166.250 activity warrants subnet-wide investigation
---
End of Briefing
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-GLOBET-PH |
| ASN | AS4775 |
| Network Name | GBB-VISMIN-IP-POOL |
| CIDR Block | 180.190.128.0/18 |
| RIR | APNIC |
| Country | PH |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS4775 |
| Network Prefix | 180.190.164.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 23% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 16% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 20% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 08:22:12 UTC |
| Last Seen | 2026-09-01 17:12:59 UTC |
| Profile Built | 2026-09-01 17:20:51 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 180.190.166.21
Who owns the IP address 180.190.166.21?
180.190.166.21 is registered to IRT-GLOBET-PH. The address falls within the 180.190.128.0/18 network block. Registration is held at APNIC.
Where is 180.190.166.21 located?
Geolocation data places 180.190.166.21 in Caloocan, Metro Manila, Philippines. The local time zone is Asia/Manila. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 180.190.166.21 malicious or safe?
180.190.166.21 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.