181.196.87.128
181.196.87.128 is an IPv4 address operated by CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP (AS28006), geolocated to New York, United States. Its reverse DNS name is 128.87.196.181.static.anycast.cnt-grms.ec. As of October 14, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.
IP 181.196.87.128/32 is registered to CORPORACION NACIONAL DE TELECOMUNICACIONES in Ecuador but displays conflicting geolocation data suggesting New York, US. While no open services are detected, the asset holds a critical risk score of 70 with high campaign likelihood and strong threat evidence. DNS hygiene is poor with no SPF, DMARC, or DNSSEC records, and the profile contains a contradiction between claimed geolocation and RTT physics measurements. Due to the critical severity rating, the recommendation is to block the IP despite the very low overall confidence score.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP |
| ASN | AS28006 |
| Network Name | 181.196.0.0 - 181.196.255.255 |
| CIDR Block | 181.196.0.0/16 |
| RIR | LACNIC |
| Country | EC |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 128.87.196.181.static.anycast.cnt-grms.ec |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 128.87.196.181.static.anycast.cnt-grms.ec |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS28006 |
| Network Prefix | 181.196.87.0/24 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-14 14:17:15 UTC |
| Last Seen | 2026-10-14 14:17:15 UTC |
| Profile Built | 2026-10-14 14:39:27 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 181.196.87.128
Who owns the IP address 181.196.87.128?
181.196.87.128 is registered to CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP. The address falls within the 181.196.0.0/16 network block. Registration is held at LACNIC.
Where is 181.196.87.128 located?
Geolocation data places 181.196.87.128 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 181.196.87.128 malicious or safe?
181.196.87.128 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 181.196.87.128?
The reverse DNS (PTR) record for 181.196.87.128 is 128.87.196.181.static.anycast.cnt-grms.ec. This hostname is forward-confirmed, meaning it resolves back to the same address.