190.6.15.150📋 Copy

# IP Intelligence Briefing: 190.6.15.150/32

Classification: MODERATE RISK

Date: 2026-07-25

Prepared: IPDebrief Intelligence Team

---

## Executive Summary

IP address 190.6.15.150 is a Venezuelan network endpoint with an overall risk score of 55/100. The IP belongs to Net Uno, C.A (ASN 11562) within the 190.6.15.128/25 block. While no active threat indicators are currently present, the IP is listed on 3 of 8 DNSBLs and shows elevated activity patterns warranting defensive attention.

---

## Ownership and Network Context

• Organization: Net Uno, C.A
• ASN: 11562
• Network Block: 190.6.15.128 - 190.6.15.255 (/25)
• Country: Venezuela (VE)
• RIR: LACNIC
• Registration: Abusive contact available via RDAP

The IP resolves to PTR hostname `host-190-6-15-150.NET-UNO.NET` with forward resolution unconfirmed.

---

## Threat Assessment

Risk Score: 55/100 (Moderate Risk)

Control plane analysis indicates minimal operator risk (0.2174) with stable BGP prefix 190.6.15.0/24. RPKI state and IRR consistency data unavailable.

---

## Observation History

13 historical observations recorded. Recent signals indicate:

• Geolocation consensus between Caracas and Maracaibo (signal inconsistency noted)
• One Alienvault OTX signal flagged `has_threats: true` with pulse activity
• Ownership signals consistent across observations

Temporal analysis shows 0 persistent threat observations; IP not classified as persistently malicious.

---

## Neighborhood Analysis

Subnet 190.6.15.150/24 assessment:

• Abuse Density: 0
• Risk Distribution: 0 High, 1 Medium, 2 Low
• Notable Neighbors:

- 190.6.15.64: Risk 0

- 190.6.15.83: Risk 25

- 190.6.15.232: Risk 40

The subnet exhibits low-to-moderate risk distribution with no high-risk neighbors identified.

---

## Related Entities

• Network: 190.6.15.128 - 190.6.15.255 (Same Network)
• Hostnames: host-190-6-15-150.NET-UNO.NET (DNS association)

---

## Recommended Actions

Primary Recommendation: Increase logging verbosity and review recent activity from this IP.

Firewall Rules

```bash

# iptables

iptables -A INPUT -s 190.6.15.150 -j DROP

# nftables

nft add rule inet filter input ip saddr 190.6.15.150 drop

# nginx

deny 190.6.15.150;

# pfSense

190.6.15.150/32

# Cloudflare WAF

{"description":"Block 190.6.15.150 — IPDebrief risk score 55","action":"block","filter":{"expression":"ip.src eq 190.6.15.150"}}

# AWS WAF

{"Addresses":["190.6.15.150/32"],"Description":"IPDebrief risk 55"}

```

---

## Intelligence Notes

This IP shows moderate risk characteristics typical of residential or hosting infrastructure in the Venezuelan region. The lack of open services and no active threat indicators suggest limited immediate threat, but the DNSBL listings and elevated risk score warrant inclusion in monitoring watchlists. Neighboring IPs in the /24 subnet show variable risk levels, suggesting mixed traffic patterns across the block.

Action Priority: MEDIUM

Monitoring Recommendation: Enable enhanced logging for 30-day observation period.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.