181.124.204.192
# IP Intelligence Briefing: 181.124.204.192/32
Classification: Low Risk | Date: 2026-07-26 | Risk Score: 25/100
## Executive Summary
IP 181.124.204.192 presents a low-risk threat profile with a risk score of 25. The address is firewalled with no active services, though geographic validation inconsistencies and minimal DNSBL listings warrant continued monitoring.
## Technical Profile
- Geolocation: Ashburn, VA, US (with conflicting data from Paraguay-based PTR records)
- ASN/Ownership: No ASN or organizational data available
- Network Role: Firewalled / No Services (no open ports detected)
- Control Plane: Origin ASN 23201, BGP prefix 181.124.192.0/20, routing status unstable
## Threat Indicators
- DNSBL Status: 1 of 8 DNSBL listings identified
- Known Threats: No confirmed attacker indicators, no known campaigns, no spam source designation
- Tor/Proxy: Not a Tor exit node, not identified as proxy or VPN
- Blacklist Count: 0 active blacklists
## DNS Analysis
- PTR Record: pool-192-204-124-181.telecel.com.py (Paragayan domain indicating residential/mobile connection)
- Forward Resolution: Confirmed to same hostname
- Email Authentication: No SPF, DMARC, or TXT records configured
- Geographic Consensus: False (multiple geolocation sources disagree)
## Historical Observations
Fourteen observations recorded. Recent signals indicate:
- Network role classification signals
- Geolocation validation attempts with some discrepancies
- Control plane stability assessments
- DNSBL monitoring across eight lists
## Neighborhood Assessment
- Subnet: 181.124.204.192/24
- Abuse Density: 0 (no elevated abuse activity in subnet)
- Threat Siblings: None identified
- Neighbor Count: 0 (isolated address in subnet)
## Related Entities
Two DNS associations identified: pool-192-204-124-181.telecel.com.py
## Recommended Actions
- Monitoring: Continue observing DNSBL listing status; investigate geographic discrepancies
- Blocking: No immediate blocking required due to low risk profile
- Investigation: Verify if geographic mismatch indicates misconfiguration or spoofing
- Baseline: Establish baseline for future deviation detection given unstable routing status
## SOC Analyst Notes
This IP appears to be a residential or mobile endpoint (Telecel Paraguay) with no active services. The low risk score and absence of threat indicators suggest benign activity. However, the geographic validation inconsistency and unstable routing warrant periodic re-evaluation. No immediate threat mitigation required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Telecel S.A. |
| ASN | AS23201 |
| Network Name | 181.124.0.0 - 181.127.255.255 |
| CIDR Block | 181.124.0.0/14 |
| RIR | LACNIC |
| Country | PY |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | pool-192-204-124-181.telecel.com.py |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | pool-192-204-124-181.telecel.com.py |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS23201 |
| Network Prefix | 181.124.192.0/20 |
| Route mapping | Found |
| RPKI Status | Valid |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 46% | 3 | 4 |
| services | 8% | 1 | 1 |
| ownership | 25% | 1 | 1 |
| reputation | 14% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 22% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 08:22:13 UTC |
| Last Seen | 2026-09-03 01:58:00 UTC |
| Profile Built | 2026-09-03 02:07:00 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 32 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 181.124.204.192
Who owns the IP address 181.124.204.192?
181.124.204.192 is registered to Telecel S.A.. The address falls within the 181.124.0.0/14 network block. Registration is held at LACNIC.
Where is 181.124.204.192 located?
Geolocation data places 181.124.204.192 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 181.124.204.192 malicious or safe?
181.124.204.192 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 181.124.204.192?
The reverse DNS (PTR) record for 181.124.204.192 is pool-192-204-124-181.telecel.com.py. This hostname is not forward-confirmed, so it should be treated as a weak signal.