190.128.201.18📋 Copy

# IP Intelligence Briefing: 190.128.201.18/32

## Executive Summary

The IP address 190.128.201.18 is a Telecel S.A. infrastructure address located in Asunción, Paraguay, with a moderate risk score of 65/100. The IP exhibits firewalled status with no active services and represents a regional ISP allocation. SOC teams should monitor for anomalous outbound connections from this address.

---

## Risk Profile

---

## Network Characteristics

• Infrastructure Type: Provider/ISP infrastructure
• Network Role: Firewalled / No Services Detected
• DNS PTR: static-18-201-128-190.telecel.com.py
• BGP Prefix: 190.128.128.0/17
• Route Stability: Not stable (route changes observed in 30-day window)
• Open Ports: None detected
• TLS/HTTP Services: None

---

## Threat Indicators

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Threat Feeds: None detected
• Campaign Correlation: No matches
• Malicious Activity Days: 0

---

## Subnet Analysis (190.128.201.0/24)

• Abuse Density: 1/256 (low)
• Classification: Mostly Clean
• Active Siblings: 1
• Threat Siblings: 1
• Inherited Risk: 2/100

---

## Observation History (Recent 25 Observations)

The IP has shown temporal signals including:

• 2026-06-23: ASN 23201 with prefix 190.128.192.0/18
• 2026-06-17: ASN 23201 with prefix 190.128.128.0/17
• DNSSEC Validation: Confirmed
• Operator Score: 0.1304 (Minimal)

---

## Related Entities (76 Relationships)

• Multiple "Same Network" relationships to 190.128.192.0 - 190.128.255.255 range
• No external hostname or certificate relationships detected

---

## Recommended Actions

Priority: High

1. Monitoring: Increase logging verbosity and review recent activity from this IP

2. Block Recommendation: Consider blocking if inbound connection attempts observed

Firewall Rules:

• iptables: `iptables -A INPUT -s 190.128.201.18 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 190.128.201.18 drop`
• nginx: `deny 190.128.201.18;`
• pfSense: `190.128.201.18/32`

---

## Assessment Notes

This IP represents legitimate ISP infrastructure from Paraguay. The elevated risk score (65) appears to be driven by route instability and the presence of one threat sibling in the subnet rather than confirmed malicious activity from this specific address. Recommend monitoring outbound connections from this IP to internal resources and correlating with internal traffic patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.