170.78.119.254📋 Copy

Intelligence was gathered on IP 170.78.119.254, which was identified as a residential endpoint associated with ALCANS TELECOM LTDA (ASN 52783) in Ribeirão Preto, Brazil. The profile indicated a Low Risk reputation with a risk score of 25. No open ports, TLS certificates, or HTTP server banners were detected, and the address was not confirmed as a Tor exit, known attacker, or spam source. While the general blacklist count was zero, control plane data revealed one listing across eight DNS blacklists. The immediate neighborhood was classified as mostly clean with an abuse density of 0.25 and one threat sibling. Behavioral analysis showed zero total incidents, honeypot hits, or WAF violations. Despite the low risk score, the threat actor classification labeled the host as "Suspicious" due to the presence of threat indicators, though no specific campaigns were matched. The final recommendation was to Monitor the traffic with low severity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.