190.10.155.251📋 Copy

# IP Intelligence Briefing: 190.10.155.251/32

Date: 2026-07-22

Classification: Low Risk

Risk Score: 20/100

---

## Executive Summary

IP address 190.10.155.251 is a low-risk endpoint assigned to Xtrim EC (ASN 14522) within the 190.10.152.0/21 block in Ecuador (Loja). The IP is currently classified as "Firewalled / No Services" with no active open ports or exposed web services. No threat indicators, blacklist hits, or malicious activity have been observed. The subnet exhibits clean classification with zero abuse density across the /24 range.

---

## Technical Profile

Ownership & Network:

• ASN: 14522 (Xtrim EC)
• Network Range: 190.10.152.0 - 190.10.159.255 (190.10.152.0/21)
• RIR: LACNIC
• Registration: LACNIC region

Geolocation:

• Country: Ecuador (EC)
• Region/City: Loja
• Coordinates: -3.99, -79.20

Network Role:

• Services: None detected (firewalled)
• Open Ports: 0
• Infrastructure Type: Not CDN, VPN, proxy, Tor, hosting, or cloud
• Classification: Residential/Infrastructure endpoint

---

## Threat Assessment

Current Risk Indicators:

• Threat reputation: None detected
• Blacklist count: 0
• DNSBL listings: 0
• Known campaigns: None
• Abused confidence score: Not applicable
• Is known attacker: False
• Is spam source: False
• Is Tor exit node: False

Control Plane:

• Origin ASN: 14522
• BGP Prefix: 190.10.128.0/19
• Route stability: Unstable
• DNSSEC: Valid
• Operator score: 0.1304 (Minimal)

---

## DNS Analysis

PTR Record: 251.190-10-155-0.loja.gye.satnet.net

Forward Resolution: Not confirmed

Domain: satnet.net

Email Authentication:

• SPF: Present
• DMARC: Not configured
• TXT records: 0

---

## Observation History

Total observations: 16 signals across multiple categories

Recent Signal Summary:

• Network classification: Consistent low-risk profile
• Geolocation validation: Flagged implausible (RTT 116ms < minimum possible 201.5ms for 10,077km distance)
• Ownership: No changes detected
• Threat persistence: 0 days
• Operator classification: Minimal (score 0.15)

Temporal Analysis:

• Threat observation count: 0
• Persistent malicious behavior: No
• Average ownership duration: Not applicable

---

## Neighborhood Analysis

Subnet: 190.10.155.251/24

• Total siblings: 1
• Active siblings: 0
• Threat siblings: 0
• Abuse density: 0 (clean classification)
• High-risk neighbors: 0
• Medium-risk neighbors: 0
• Low-risk neighbors: 0

---

## Relationships

Network Associations:

• Same Network: 190.10.152.0 - 190.10.159.255 (2 associations)

DNS Associations:

• 251.190-10-155-0.loja.gye.satnet.net (2 associations)

---

## Security Recommendations

Firewall/Blocking: No action required. IP is classified as low risk with no active threats.

Monitoring: Continue standard baseline monitoring. No elevated threat indicators present.

Note: Geographic data validation shows RTT inconsistency (116ms observed vs 201.5ms minimum for stated distance to Loja, Ecuador). This may indicate geolocation database inaccuracy rather than actual routing issues.

---

Analyst Assessment: This IP represents a benign endpoint with no malicious indicators. The firewalled state and zero open ports reduce attack surface. Geographic discrepancies warrant monitoring but do not indicate active threat behavior. No immediate defensive action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.