190.89.137.158📋 Copy

IP Intelligence Briefing: 190.89.137.158

Date: 2026-06-13

---

**1. Core Profile**

• Risk Score: Moderate (55/100)
• Ownership:

- ASN: 270368 (T. R. TELECOMUNICACOES LTDA, Brazil)

- Geolocation: Votuporanga, São Paulo, Brazil (lat: -20.48, lon: -50.01)

• Threat Indicators:

- No direct malicious activity detected.

- DNSBL Listings: 3/8 (low confidence, no specific lists identified).

• Network Role: Residential endpoint (infrastructure type: residential, ISP: lacnic).

---

**2. Observation History**

• Recent Activity:

- DNSSEC validation confirmed (valid).

- 3 DNSBL listings observed (no specific list names provided).

- No changes in ownership or threat signals over the last 30 days.

• Behavioral Flags:

- No honeypot hits, enumeration attempts, or WAF violations.

- Resides in a subnet with 14% abuse density (14/100 high-risk neighbors).

---

**3. Relationships & Network Context**

• Linked Entities:

- Same network: AS270368 (T. R. TELECOMUNICACOES LTDA).

• Subnet: 190.89.137.0/24

- Neighbor Risk: 14 high-risk IPs (14%), 82 medium-risk IPs (82%), 4 low-risk IPs (4%).

- Active Siblings: 100 total IPs in subnet.

---

**4. Threat & Mitigation**

• No Direct Threats:

- No known attacker, spam, or Tor exit node associations.

- No TLS cert or service banners detected.

• Recommended Actions:

- Monitor DNSBL listings (investigate 3/8 entries).

- Consider isolating the subnet due to elevated neighbor risk (14%).

- Verify residential endpoint legitimacy with ISP (T. R. TELECOMUNICACOES LTDA).

---

Next Steps:

• Validate DNSBL entries with upstream providers.
• Correlate with neighboring IPs for potential lateral movement risks.
• Maintain monitoring for changes in subnet abuse density.

Product: IPDebrief | Copyright: © 2026 Jason Alberino. All rights reserved.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.