170.0.212.3📋 Copy

# IP Intelligence Briefing: 170.0.212.3/32

Classification: LOW RISK

Date: Current Analysis

Analyst: IPDebrief Intelligence Team

## Executive Summary

IP address 170.0.212.3 presents a low-risk profile with no active threat indicators. Classification as residential endpoint with no malicious campaign associations or blacklist listings.

## Profile Overview

## Threat Assessment

Threat Indicators: None detected

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Abuse Confidence Score: Not applicable
• Associated Campaigns: None

DNS Analysis:

• PTR Hostnames: None
• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Auth: No SPF/DMARC records
• DNSBL Listed: 0/8 lists

Network Services:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None

## Observation History

Total Observations: 13 signals

Recent Activity: July 29, 2026

• Geolocation consistency confirmed (Bahia, Brazil)
• No ownership changes recorded
• Threat persistence days: 0
• Is persistently malicious: No
• Threat observation count: 0

## Relationship Mapping

Connected Entities: 2

• Same Network: 282634 (Network ID)
• No hostname, certificate, or organizational relationships identified

## Neighborhood Analysis (170.0.212.0/24)

Neighbor Risk Profile:

• 170.0.212.29: Risk Score 25 (Low)
• 170.0.212.42: Risk Score 25 (Low)
• 170.0.212.182: Risk Score 25 (Low)

Subnet Classification: Low-risk residential subnet with no concentrated abuse activity.

## Control Plane Data

• BGP Prefix: 170.0.212.0/22
• Origin ASN: 263015
• Route Stability: False
• Route Changes (30d): 0
• RPKI State: Not verified
• DNSSEC Valid: Yes

## Recommended Actions

Security Posture: No immediate blocking required

Firewall Rules: Not recommended (risk score 0)

Monitoring: Standard residential traffic monitoring sufficient

## Intelligence Narrative

IP address 170.0.212.3 is a residential endpoint located in Luis Eduardo Magalhães, Bahia, Brazil, associated with ASN 263015 (G7 Telecom Ltda). The IP demonstrates no malicious behavior indicators across all threat feeds and blacklist databases. Network classification confirms residential infrastructure without proxy, VPN, or hosting characteristics. The surrounding /24 subnet exhibits low abuse density (0.0) with no high or medium-risk neighbors detected. Historical observations show consistent residential usage patterns with zero threat persistence days. No active campaigns or correlated malicious IPs identified.

SOC Analyst Guidance: Treat as benign residential traffic. No blocking or restriction recommended. Standard logging and traffic monitoring procedures apply.

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.