170.245.250.239
IP Intelligence Briefing: 170.245.250.239
Date: 2026-06-06
---
**1. Core Profile**
- Risk Score: 80/100 (High Risk)
- Ownership: Registered to T.A.LUIZ ELETRONICO LTDA - ME (ARIN) in Brazil (AS266032).
- Geolocation: Goiânia, Goiás, Brazil (GeoPlausible: False).
- Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services).
- Threat Indicators: No direct malicious activity detected (no blacklists, campaigns, or spam).
---
**2. Observation History**
- Signal Trends: Mixed signals over the past 30 days.
- Minimal Risk: 15% (operator score 0.13).
- DNSSEC Valid: Confirmed.
- DNSBL Listings: 4/8 lists (high severity).
- Abuse Density: Subnet (170.245.250.0/24) has 37.5% abuse density, with 3 high-risk neighbors.
---
**3. Relationships & Network**
- DNS Associations: Linked to rede250.239.fontetelecom.net.br (PTR record).
- Subnet Neighbors:
- 8 total IPs in 170.245.250.0/24.
- High-risk neighbors: 3 IPs (risk scores 55–80).
- Abuse Density: 37.5% (mostly_clean classification).
---
**4. Threat & Risk Analysis**
- No Direct Malicious Activity: No indicators of botnets, spam, or known attackers.
- Neighbor Risk: Elevated risk in the subnet due to high-risk neighbors (e.g., 170.245.250.143, 170.245.250.240).
- DNSBL Listings: Listed on 4/8 DNSBLs (high severity), suggesting potential abuse.
---
**5. Recommended Actions**
- Block the IP: Implement firewall rules to block 170.245.250.239.
- iptables: `iptables -A INPUT -s 170.245.250.239 -j DROP`
- Cloudflare WAF: Block IP with rule `{ "action": "block", "expression": "ip.src eq 170.245.250.239" }`
- Monitor Subnet: Investigate high-risk neighbors and DNS associations (e.g., `rede250.239.fontetelecom.net.br`).
- Verify Geolocation: Confirm if the IP’s location (Goiânia, Brazil) aligns with legitimate network activity.
---
**6. Summary**
The IP 170.245.250.239 is registered to a Brazilian entity and shows no direct malicious activity. However, its subnet has a high abuse density, and it is listed on multiple DNSBLs. While the IP itself is not currently malicious, the surrounding network and DNS associations warrant further investigation. Immediate blocking is recommended to mitigate potential risks.
SOC Analyst Note: Correlate with internal logs and monitor for lateral movement or unusual traffic patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | T.A.LUIZ ELETRONICO LTDA - ME |
| ASN | AS266032 |
| Network Name | 302418 |
| CIDR Block | 170.245.248.0/22 |
| RIR | ARIN |
| Country | BR |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | rede250.239.fontetelecom.net.br |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | rede250.239.fontetelecom.net.br |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 28% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-11 21:10:12 UTC |
| Last Seen | 2026-06-26 11:58:43 UTC |
| Profile Built | 2026-06-26 12:04:39 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.