190.89.136.45
IP Intelligence Briefing: 190.89.136.45
Date: 2026-06-17
---
**1. Core Profile**
- Risk Score: 80 (High Risk)
- Ownership: T. R. TELECOMUNICACOES LTDA (AS270368), Brazil (SP, Votuporanga).
- Network Role: Residential endpoint (not cloud, CDN, or mobile).
- Geolocation: Brazil (SP), with a 2500km accuracy radius.
- Threat Indicators: No direct malicious activity listed, but historical observations show 4 listings in threat feeds (high severity).
---
**2. Observation History**
- Recent Activity (2026-06-17):
- Listed in 4 threat feeds (high severity).
- BGP prefix confirmed as 190.89.136.0/24 (AS270368).
- DNSSEC validation successful, but operator score is low (0.13).
- A connection failed attempt detected (HTTPS fingerprinting error).
---
**3. Relationships & Subnet**
- Network Context:
- Subnet: 190.89.136.0/24 (100 IPs).
- Abuse Density: 25% (25 high-risk, 73 medium, 2 low).
- Neighboring IPs show mixed risk: 25% high-risk (e.g., 190.89.136.32, 55 risk score).
- All IPs share the same ASN (AS270368) and netname (378879).
---
**4. Threat & Risk Analysis**
- No Direct Malicious Activity: No indicators of C2, spam, or Tor usage.
- Subnet Risks: Elevated abuse density suggests potential for lateral movement or shared infrastructure risks.
- Operator Score: Minimal (0.13), indicating low trustworthiness of the ISP.
---
**5. Recommended Actions**
- Monitor Subnet: Given 25% abuse density, investigate neighboring IPs for suspicious behavior.
- Verify Threat Listings: Cross-check the 4 threat feed listings for false positives.
- Block High-Risk Neighbors: Consider blocking IPs with >55 risk scores (e.g., 190.89.136.32) to mitigate lateral threats.
- Check DNSSEC & BGP: Ensure DNSSEC validation and BGP route stability for this subnet.
---
Conclusion: This residential IP is part of a subnet with moderate to high abuse density. While no direct malicious activity is detected, the historical threat listings and subnet context warrant further monitoring. SOC teams should prioritize isolating high-risk neighbors and validating threat sources.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | T. R. TELECOMUNICACOES LTDA |
| ASN | AS270368 |
| Network Name | 378879 |
| CIDR Block | 190.89.136.0/23 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 17% | 1 | 1 |
| services | 26% | 2 | 3 |
| ownership | 19% | 2 | 2 |
| reputation | 26% | 1 | 3 |
| geolocation | 21% | 2 | 2 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:04:03 UTC |
| Last Seen | 2026-06-23 02:18:04 UTC |
| Profile Built | 2026-06-23 02:34:37 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 23 |
Full dossier details are available via our API.