190.213.189.121📋 Copy

# IP Intelligence Briefing: 190.213.189.121/32

Date: 2026-07-28

Status: Monitoring

Classification: Informational

---

## Executive Summary

IP address 190.213.189.121 presents a low-risk profile with minimal observable threat indicators. The address is currently classified as "Firewalled / No Services" with no active open ports or public-facing services. Historical data indicates conflicting geolocation signals (US vs. Trinidad and Tobago), though current risk scoring remains neutral.

---

## Technical Profile

Risk Assessment:

• Overall Risk Score: 0
• Provider Score: 0
• Authority Score: 0
• Reputation: Low Risk
• Risk Label: Minimal

Network Infrastructure:

• Origin ASN: 27665
• BGP Prefix: 190.213.176.0/20
• Route Stability: Unstable (isRouteStable: false)
• Control Plane Operator Score: 0.1304

Geolocation:

• Primary Location: New York, US
• Alternative Signal: Port-of-Spain, Trinidad and Tobago (TT)
• RIR: LACNIC (based on historical signals)
• GeoConsensus: Conflicting signals detected

---

## Threat Indicators

Current Threat Status:

• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Blacklist Count: 0
• Pulsedive Risk: Not applicable

DNS/Email:

• DNS Resolution: None (forwardConfirmed: false)
• PTR Hostnames: Empty
• Email Auth (SPF/DMARC): Not configured
• DNSBL Listed: 0 total lists

Services:

• Open Ports: None detected
• TLS Certificates: None
• HTTP Banner: None

---

## Historical Observation Analysis

Observation Count: 11 signals (2026-07-28)

Key Historical Signals:

1. Organization: Columbus Communications Trinidad Limited (lacnic RIR)

- Abuse Contact: colwayne.babb@cwc.com

- CIDR Block: 190.213.128.0/17

2. Proxy Assessment: AS27665 flagged as "Compromised Server" proxy type

- Proxy Risk Score: 66

- Region: Port of Spain, Trinidad and Tobago

3. Control Plane: Operator score 0.1304 with "Minimal" label

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

---

## Neighborhood Analysis

Subnet: 190.213.189.121/24

• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• Inherited Risk: 0

No neighboring IP addresses identified in the /24 subnet with observable threat activity.

---

## Relationship Graph

Related Entities: None identified

• No associated subnets, hostnames, organizations, or certificates in relationship database
• No correlated IPs detected in campaign analysis

---

## Recommended Actions

Firewall/Network Security:

• No immediate blocking recommended based on current risk profile
• Monitor for service activation (ports opening)
• Verify geolocation consistency if this IP is observed in traffic

Threat Monitoring:

• Track route stability (currently flagged as unstable)
• Monitor for proxy/compromised server classification changes
• Watch for DNS resolution activity

Classification:

• Priority: Low
• Action: Passive monitoring recommended
• Escalation Criteria: Service activation, risk score increase, or proxy classification changes

---

Analyst Notes: The conflicting geolocation signals (US vs. Trinidad and Tobago) warrant attention but do not currently indicate active malicious activity. The "Firewalled / No Services" classification suggests this is a dormant or residential endpoint. Continue passive monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.