190.152.250.113📋 Copy

## THREAT INTELLIGENCE BRIEFING

Target: 190.152.250.113/32

Classification: Low Risk / Residential Infrastructure

Date: July 2026

Analyst: IPDebrief Intelligence Team

EXECUTIVE SUMMARY

IP 190.152.250.113 is a residential endpoint classified under Ecuadorian telecommunications infrastructure (CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP). Risk assessment indicates low threat profile with no active malicious indicators. The IP demonstrates residential network characteristics and is not associated with known threat campaigns or persistent abuse patterns.

NETWORK OWNERSHIP & CLASSIFICATION

• ASN: 28006 (CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP)
• CIDR Block: 190.152.128.0/17 (190.152.250.0/24 BGP prefix)
• RIR: LACNIC
• Infrastructure Type: Residential Endpoint
• Network Role: Residential (not cloud, CDN, VPN, proxy, or hosting)

GEOLOCATION ANALYSIS

Geographic signals indicate Ecuador (Quito) with DNS PTR hostname resolving to `113.250.152.190.static.anycast.cnt-grms.ec`. Some geolocation validation discrepancies detected between profile and historical signals, warranting continued monitoring of geographic consistency.

THREAT INDICATOR ASSESSMENT

• Risk Score: 25/100 (Low Risk)
• Threat Indicators: None detected
• Blacklist Status: No confirmed blacklist listings (threat indicators section)
• Known Campaigns: None associated
• Tor Exit/Proxy Status: Negative
• Persistently Malicious: No

SERVICE & PORT ANALYSIS

• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None identified
• Email Authentication: SPF/DMARC records not configured

OBSERVATION HISTORY

Sixteen signals observed across the monitoring period. Most recent observations (July 23, 2026) confirm:

• Residential infrastructure classification
• Stable ownership patterns (no ownership changes)
• Consistent geographic signals pointing to Ecuador
• No escalation in threat profile

CONTROL PLANE STATUS

• DNSSEC: Valid
• Route Stability: Unstable (isRouteStable: false)
• RPKI State: Not available
• DNSBL Listings: 1 out of 8 total lists flagged (control plane data)

RELATIONSHIP ANALYSIS

Three relationships identified:

1. DNS Association: `113.250.152.190.static.anycast.cnt-grms.ec`

2. Network Association: 190.152.128.0 - 190.152.255.255

3. Duplicate DNS Association (same as #1)

NEIGHBORHOOD ANALYSIS

• Subnet: 190.152.250.113/24
• Neighbor Count: 0
• Abuse Density: 0%
• Risk Distribution: No high or medium risk neighbors detected

RECOMMENDED ACTIONS

No immediate firewall or blocking actions recommended. The IP demonstrates low-risk residential characteristics with no active threat indicators. Standard residential endpoint monitoring is sufficient.

INTELLIGENCE NOTES

1. The `anycast.cnt-grms.ec` PTR hostname suggests this IP may be part of a residential anycast infrastructure used by CNT EP

2. Geographic signals show Ecuador (Quito), but profile geolocation indicated US/New York—investigate for potential signal discrepancies

3. Route stability flag indicates potential routing changes; monitor BGP announcements for prefix 190.152.250.0/24

4. One DNSBL listing noted in control plane data warrants periodic revalidation

END BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.