190.80.24.242
# INTELLIGENCE BRIEFING: IP 190.80.24.242/32
Classification: LOW RISK / MONITOR
Date: 2026-07-24
Analyst: IPDebrief Intelligence Team
---
## EXECUTIVE SUMMARY
IP 190.80.24.242 presents a mixed threat profile with a current low-risk assessment but notable historical threat indicators. The IP is currently firewalled with no active services, yet historical blacklist data and geolocation discrepancies warrant continued monitoring.
---
## RISK ASSESSMENT
| Metric | Value |
|---|---|
| Risk Score | 0 |
| Reputation | Low Risk |
| Provider Score | 0 |
| Authority Score | 0 |
| Blacklist Count | 0 |
| Is Known Attacker | False |
---
## OWNERSHIP & GEOLOCATION
Critical Finding: Significant geolocation discrepancy detected.
- Geolocation Data: US, Boston, MA (US-MA)
- ASN: 19863 - Guyana Telephone & Telegraph Co., GY
- CIDR Block: 190.80.0.0/19
- Registration: 2006-07-28 (LACNIC)
- Country Code (ASN): GY (Guyana)
The IP's geolocation indicates US infrastructure, yet ownership records confirm Guyana-based infrastructure. This mismatch requires investigation for potential spoofing or routing anomalies.
---
## NETWORK STATE
- Services: No open ports detected
- Status: Firewalled / No Services
- DNS: No PTR hostnames, no forward resolution
- Hosted Domains: None
- Email Auth: No SPF/DMARC records for net.gy domain
---
## THREAT INDICATORS
Historical Blacklist Activity:
- Signal ID 2344 (2026-07-24): Listed on 8 threat feeds, 2 currently active
- Maximum Severity: High
- Categories: [Omitted for brevity]
Campaign Correlation: None identified
Associated IPs: 0 correlated IPs
Cert Matches: 0
---
## NEIGHBORHOOD ANALYSIS
Subnet: 190.80.24.0/24
| Neighbor IP | Risk Score | Authority Score |
|---|---|---|
| 190.80.24.8 | 55 | 50 |
| 190.80.24.74 | 40 | 50 |
| 190.80.24.136 | N/A | N/A |
Abuse Density: 0
Risk Distribution: 0 High, 2 Medium, 0 Low
Two medium-risk IPs present in the same /24 subnet suggest potential infrastructure sharing or coordinated activity.
---
## RELATIONSHIP GRAPH
No relationships detected. The IP has no identified associations with:
- Subnets (beyond immediate /24)
- Hostnames
- Organizations
- Certificates
---
## SECURITY RECOMMENDATIONS
Immediate Actions:
- Monitor for service activation on this IP
- Verify geolocation discrepancy through independent sources
- Review historical blacklist entries for context
Firewall Rules: No specific rules generated due to low current risk profile.
---
## TEMPORAL ANALYSIS
- Ownership Changes: 0
- Threat Persistence: 0 days
- Observation Count: 12 signals
- Route Stability: Unstable (isRouteStable: false)
- RPKI Validation: Invalid
---
## CONCLUSION
IP 190.80.24.242 is currently low-risk and appears inactive (firewalled). However, the following factors warrant SOC attention:
1. Geolocation mismatch between US location and Guyana ASN
2. Historical blacklist activity with high-severity ratings
3. Medium-risk neighbors in the same /24 subnet
Priority: Monitor. No immediate blocking required, but continue tracking for service activation or behavioral changes.
---
*Report generated from IPDebrief intelligence platform data.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Guyana Telephone & Telegraph Co. |
| ASN | AS19863 |
| Network Name | 190.80.0.0 - 190.80.63.255 |
| CIDR Block | 190.80.0.0/18 |
| RIR | LACNIC |
| Country | GY |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 242-24-pool.dsl.gol.net.gy |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 242-24-pool.dsl.gol.net.gy |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS19863 |
| Network Prefix | 190.80.0.0/19 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 4% | 1 | 1 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 06:54:46 UTC |
| Last Seen | 2026-08-27 00:56:04 UTC |
| Profile Built | 2026-08-29 06:44:57 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 190.80.24.242
Who owns the IP address 190.80.24.242?
190.80.24.242 is registered to Guyana Telephone & Telegraph Co.. The address falls within the 190.80.0.0/18 network block. Registration is held at LACNIC.
Where is 190.80.24.242 located?
Geolocation data places 190.80.24.242 in Boston, US-MA, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 190.80.24.242 malicious or safe?
190.80.24.242 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 190.80.24.242?
The reverse DNS (PTR) record for 190.80.24.242 is 242-24-pool.dsl.gol.net.gy. This hostname is not forward-confirmed, so it should be treated as a weak signal.