# 181.196.87.128 — IP Intelligence Summary

181.196.87.128 is an IPv4 address operated by CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP (AS28006), geolocated to New York, United States. Its reverse DNS name is 128.87.196.181.static.anycast.cnt-grms.ec. As of October 14, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/181.196.87.128
- Last updated: 2026-10-14

## Ownership

- Organization: CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP
- Network name: 181.196.0.0 - 181.196.255.255
- Allocated block: 181.196.0.0/16
- ASN: AS28006 (https://ipdebrief.com/asn/28006)
- Regional registry: LACNIC

## Location

- City: New York
- Region: US-NY
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- 128.87.196.181.static.anycast.cnt-grms.ec
- Forward-confirmed: yes

## Analyst narrative

IP 181.196.87.128/32 is registered to CORPORACION NACIONAL DE TELECOMUNICACIONES in Ecuador but displays conflicting geolocation data suggesting New York, US. While no open services are detected, the asset holds a critical risk score of 70 with high campaign likelihood and strong threat evidence. DNS hygiene is poor with no SPF, DMARC, or DNSSEC records, and the profile contains a contradiction between claimed geolocation and RTT physics measurements. Due to the critical severity rating, the recommendation is to block the IP despite the very low overall confidence score.

## Addresses sharing infrastructure

- 181.196.14.67 — Same abuse contact (https://ipdebrief.com/181.196.14.67)
- 181.196.72.126 — Same abuse contact (https://ipdebrief.com/181.196.72.126)
- 181.196.89.13 — Same abuse contact (https://ipdebrief.com/181.196.89.13)
- 186.42.9.107 — Same abuse contact (https://ipdebrief.com/186.42.9.107)
- 186.42.11.238 — Same abuse contact (https://ipdebrief.com/186.42.11.238)
- 186.42.17.177 — Same abuse contact (https://ipdebrief.com/186.42.17.177)
- 186.42.17.241 — Same abuse contact (https://ipdebrief.com/186.42.17.241)
- 186.42.19.108 — Same abuse contact (https://ipdebrief.com/186.42.19.108)
- 186.42.33.132 — Same abuse contact (https://ipdebrief.com/186.42.33.132)
- 186.42.33.203 — Same abuse contact (https://ipdebrief.com/186.42.33.203)
- 186.47.77.39 — Same abuse contact (https://ipdebrief.com/186.47.77.39)
- 186.47.99.105 — Same abuse contact (https://ipdebrief.com/186.47.99.105)

---

Source: IPDebrief, "181.196.87.128 IP intelligence", https://ipdebrief.com/181.196.87.128, updated 2026-10-14. Assessments are probabilistic.