189.28.80.128
IP address 189.28.80.128/32 was observed with a Low Risk reputation score of 25. Ownership records identified the asset as belonging to ASN 27882 (admin-ipbroker) under the Netname BO-TIGO-202304-02 within the LACNIC region. Geolocation data indicated Cochabamba, ES, with a consensus accuracy radius of 500km.
No active services were detected on the host, and the network role was classified as Firewalled. DNS records resolved to LPZ-189-28-80-00128.tigo.bo, though forward confirmation was not verified. While the threat profile showed no known attackers, spam sources, or Tor exit nodes, control plane data indicated one DNSBL listing out of eight total lists. The surrounding subnet 189.28.80.0/24 was classified as clean with zero threat siblings and an abuse density of zero.
Behavioral analysis recorded zero incidents, honeypot strikes, or WAF violations. The overall confidence label was Very Low with a data sufficiency of 0.6667. Based on the clean neighborhood classification and lack of active threat indicators, the recommendation was to Monitor with Low Severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | admin-ipbroker |
| ASN | AS27882 |
| Network Name | BO-TIGO-202304-02 |
| CIDR Block | 189.28.80.0/20 |
| RIR | LACNIC |
| Country | BO |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | LPZ-189-28-80-00128.tigo.bo |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | LPZ-189-28-80-00128.tigo.bo |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS27882 |
| Network Prefix | 189.28.80.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-19 21:38:25 UTC |
| Last Seen | 2026-10-30 08:56:22 UTC |
| Profile Built | 2026-10-30 18:19:50 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 189.28.80.128
Who owns the IP address 189.28.80.128?
189.28.80.128 is registered to admin-ipbroker. The address falls within the 189.28.80.0/20 network block. Registration is held at LACNIC.
Where is 189.28.80.128 located?
Geolocation data places 189.28.80.128 in Cochabamba, Cochabamba, Spain. The local time zone is Europe/Madrid. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 189.28.80.128 malicious or safe?
189.28.80.128 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 189.28.80.128?
The reverse DNS (PTR) record for 189.28.80.128 is LPZ-189-28-80-00128.tigo.bo. This hostname is not forward-confirmed, so it should be treated as a weak signal.