146.70.163.91
INTELLIGENCE BRIEFING: 146.70.163.91/32
Classification: Low Risk
Date: Current
Jurisdiction: Brazil (São Paulo)
---
**OWNERSHIP & REGISTRATION**
The IP address 146.70.163.91 belongs to AS9009 (GLOBALAXS NOC) under network M247-LTD-Sao-Paulo. Registration is through ARIN. The subnet 146.70.163.0/24 shows zero abuse density with no high or medium-risk neighbors detected.
**GEOLOCATION**
Geolocation data indicates São Paulo, Brazil with multi-signal inference confidence at 0.28. The geo-plausibility check returned false, suggesting potential location inference variance. RTT measurements show 14 hops with transit networks including Comcast and Cogent.
**THREAT INDICATORS**
Current threat assessment shows no known attack campaigns, spam sources, or Tor exit node activity. Blacklist count stands at zero. The operator score registers as "Minimal" (0.1304). Historical threat observation count remains at zero.
**NETWORK SERVICES**
The IP presents as "Firewalled / No Services" with no open ports detected. DNS analysis shows no forward resolution and zero TXT records. No TLS certificates, HTTP banners, or email authentication records (SPF/DMARC) are present.
**CONTROL PLANE DATA**
Route stability is flagged as false. DNSSEC validation is valid. The IP appears on one DNSBL list out of eight total lists scanned. RPKI state and IRR consistency data are unavailable.
**OBSERVATION HISTORY (13 Observations)**
Recent activity from 2026-07-29 shows multiple signal types including port scans, ownership validation, and geolocation inference. No persistent malicious behavior detected. Threat persistence days remain at zero.
**RELATIONSHIPS**
Two relationships identified, both pointing to the M247-LTD-Sao-Paulo network segment. No certificate matches or correlated IPs detected.
**RECOMMENDED ACTIONS**
No security actions or firewall rules currently recommended. The low-risk classification (score: 25) and absence of threat indicators support continued monitoring without blocking.
---
Summary: The IP 146.70.163.91 presents as a low-risk infrastructure endpoint with no active threat indicators. While geolocation validation shows some uncertainty, the absence of malicious activity, open services, or abuse patterns supports classification as benign network infrastructure.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | GLOBALAXS NOC |
| ASN | AS9009 |
| Network Name | M247-LTD-Sao-Paulo |
| CIDR Block | 146.70.163.0/24 |
| RIR | ARIN |
| Country | BR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-24 08:18:06 UTC |
| Last Seen | 2026-08-01 16:33:06 UTC |
| Profile Built | 2026-07-29 22:20:27 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 17 |
Full dossier details are available via our API.