181.189.16.243
# IP INTELLIGENCE BRIEFING: 181.189.16.243/32
Classification: Low Risk | Report Date: 2026-07-23
Status: Active Monitoring | Threat Level: Minimal
---
## EXECUTIVE SUMMARY
IP 181.189.16.243 is a low-risk residential/enterprise endpoint located in Medellín, Colombia. The address is owned by VELONET SAS (ASN 267832) and currently shows no active threat indicators. The IP maintains a risk score of 25 (Low Risk) with no blacklist entries and no known association with malicious campaigns.
---
## OWNERSHIP & GEOLOCATION
- Organization: VELONET SAS
- ASN: 267832 (LACNIC)
- Network Block: 181.189.16.0/22 (181.189.16.0 - 181.189.19.255)
- Country: Colombia (CO)
- Region: Antioquia
- City: Medellín
- Geolocation Confidence: 800km radius (multi-source consensus)
- Abuse Contact: mauro.magrini@velonet.co
---
## NETWORK CHARACTERISTICS
- Service Classification: Firewalled / No Services
- Open Ports: None detected
- Infrastructure Type: Residential/Enterprise endpoint
- Proxy/Tor/VPN: Negative indicators across all categories
- Cloud/CDN Status: Not identified as cloud or CDN infrastructure
---
## DNS & EMAIL AUTHENTICATION
- PTR Record: 181-189-16-243.velonet.co
- Forward Resolution: 181-189-16-243.velonet.co (forward not confirmed)
- Email Authentication: SPF and DMARC records present for associated domain
- DNSBL Status: Listed on 1 of 8 total DNSBL lists
---
## THREAT INDICATORS
- Risk Score: 25 (Low Risk)
- Blacklist Count: 0 active listings
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Abuse Confidence Score: Not applicable (low risk profile)
- Threat Persistence: 0 days observed
- Persistent Malicious Activity: No
---
## OBSERVATION HISTORY (Last 16 Observations)
- Most Recent: 2026-07-23T23:11:34 UTC
- Ownership Changes: 0 (stable ownership)
- Threat Observations: 0
- Geolocation Signals: Consistent CO/Medellín attribution
- Network Classification: Consistent non-hosting, non-proxy classification
---
## NEIGHBORHOOD ANALYSIS (181.189.16.0/24)
- Total Neighbors: 2
- Abuse Density: 0 (minimal subnet risk)
- Risk Distribution: 1 low-risk neighbor, 0 medium/high risk
- Notable Neighbor: 181.189.16.220 (Risk Score: 0, Authority Score: 50)
- Threat Siblings: 0
---
## RELATIONSHIP GRAPH
- Network Associations: 181.189.16.0 - 181.189.19.255 (multiple entries)
- DNS Associations: 181-189-16-243.velonet.co (multiple entries)
- Correlated IPs: 0
- Certificate Matches: 0
---
## CONTROL PLANE METRICS
- BGP Prefix: 181.189.16.0/23
- Origin ASN: 267832
- Route Stability: Inconsistent (isRouteStable: false)
- RPKI State: Not validated
- IRR Consistency: Not assessed
- Delegation Age: Not available
- Operator Score: 0.1304 (Minimal)
---
## RECOMMENDED ACTIONS
No immediate action required. The IP presents no active threat indicators. For defensive monitoring:
1. Permit inbound/outbound traffic by default
2. Log connection attempts for baseline traffic analysis
3. No firewall rules recommended at this time
4. Monitor for changes in service availability or port exposure
---
Assessment: This IP address represents standard residential/enterprise traffic from a legitimate Colombian ISP. No mitigation actions are warranted based on current data. Continue routine monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | VELONET SAS |
| ASN | AS267832 |
| Network Name | 181.189.16.0 - 181.189.19.255 |
| CIDR Block | 181.189.16.0/22 |
| RIR | LACNIC |
| Country | CO |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 181-189-16-243.velonet.co |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 181-189-16-243.velonet.co |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS267832 |
| Network Prefix | 181.189.16.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-05 23:58:08 UTC |
| Last Seen | 2026-08-27 09:04:08 UTC |
| Profile Built | 2026-08-29 04:53:39 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 181.189.16.243
Who owns the IP address 181.189.16.243?
181.189.16.243 is registered to VELONET SAS. The address falls within the 181.189.16.0/22 network block. Registration is held at LACNIC.
Where is 181.189.16.243 located?
Geolocation data places 181.189.16.243 in Medellín, Antioquia, Colombia. The local time zone is America/Bogota. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 181.189.16.243 malicious or safe?
181.189.16.243 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 181.189.16.243?
The reverse DNS (PTR) record for 181.189.16.243 is 181-189-16-243.velonet.co. This hostname is not forward-confirmed, so it should be treated as a weak signal.