190.143.191.23📋 Copy

# IP Intelligence Briefing: 190.143.191.23

## Executive Summary

IP address 190.143.191.23/32 presents a low-risk profile with no observed malicious activity. The address belongs to TELECOMUNICACIONES DE GUATEMALA (ASN 14754) but is geolocated to New York, USA. Classification indicates residential infrastructure with no active services or threat indicators detected.

## Risk Assessment

Overall Risk Score: 0/100 (Low Risk)

## Network Ownership & Infrastructure

• Organization: TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA
• ASN: 14754 (LACNIC Registry)
• CIDR Block: 190.143.128.0/18
• Network Role: Residential Endpoint
• Geolocation: New York, NY, USA (US-NY)
• Registration Date: February 3, 2000 (9,673 days old)

## Threat Indicators

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Malware Distribution: No
• Known Campaigns: None identified
• Threat Feeds: No detections

## Network Behavior & Routing

• BGP Origin ASN: 14754
• AS Path: 2914 → 6453 → 14754
• Route Stability: Unstable (5 route changes in 30 days)
• RPKI State: Valid
• Hop Count: 30
• Transit Networks: Comcast, Cogent

## Service Exposure

• Open Ports: None detected
• HTTP Services: None active
• TLS Certificates: None
• DNS Records: No PTR hostnames, no forward resolution

## Neighborhood Analysis

• Subnet: 190.143.191.0/24
• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0%
• Inherited Risk: 0

## Historical Observations

17 total observations recorded. Recent activity shows:

• Route origin validation: Valid (local VRP)
• ASN allocation status: Allocated since 2000
• Route changes: 5 in last 30 days
• Ownership changes: 0
• Threat persistence: None
• Malicious activity: None observed

## Relationships

• Same Network: 190.143.128.0 - 190.143.191.255 (190.143.128.0/18)
• No additional related entities (hostnames, organizations, or certificates beyond network scope)

## Recommended Actions

No immediate security actions required. The IP presents a low-risk residential profile with no threat indicators. Standard monitoring is appropriate.

## Intelligence Notes for SOC Analysts

1. Geographic Discrepancy: ASN 14754 is registered in Guatemala (LACNIC), but geolocation reports New York, USA. This may indicate cross-border routing or CDN infrastructure.

2. Route Instability: 5 BGP route changes in 30 days suggests dynamic routing or potential route hijacking attempts. Monitor for further changes.

3. Residential Classification: Classification as residential endpoint reduces likelihood of hosting malicious infrastructure compared to datacenter IPs.

4. No Active Services: Absence of open ports or active services reduces exploitation surface.

## Confidence Level

High – Multiple data sources confirm residential infrastructure with no threat indicators. Monitoring recommended for route stability changes.

---

*Report generated based on IPDebrief intelligence platform data.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.