190.58.255.158📋 Copy

Intelligence Briefing: IP 190.58.255.158

Identification and Ownership

The endpoint 190.58.255.158 was identified as a residential infrastructure node assigned to Telecommunication Services of Trinidad and Tobago (ASN 5639). The address falls within the 190.58.0.0/16 CIDR block under the LACNIC region, with a PTR hostname resolving to 190-58-255-158.business.static.tstt.net.tt.

Risk Assessment

The system assigned a reputation status of Low Risk with a risk score of 20. The neighborhood classification indicated a clean subnet with zero abuse density and no threat siblings. No active campaigns, known attacker signatures, or spam source indicators were recorded. The IP was not flagged as a Tor exit node or proxy service.

Technical Anomalies and Observations

While the endpoint operated without active threat incidents, specific signal contradictions were detected. GeoValidation flagged a discrepancy where the claimed geolocation distance contradicted RTT physics measurements, indicating a minimum possible RTT of 151.9ms against an observed 95ms for a 7593.9km distance. DNS Hygiene assessment returned a score of 20 (Poor), noting the absence of SPF, DMARC, and DNSSEC validations. Control plane analysis showed the prefix was not route-stable and possessed one DNSBL listing across eight total lists.

Recommendation

The analysis concluded that the endpoint requires monitoring due to signal contradictions. No immediate firewall blocking rules were generated. The classification remains a suspicious host based on threat indicators presence, though specific attribution confidence remains moderate.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.