177.87.201.146📋 Copy

# IP Intelligence Briefing: 177.87.201.146

## Executive Summary

IP address 177.87.201.146 presents a Moderate Risk profile with a risk score of 40. The IP is assigned to iFIBRA TELECOM (ASN 52587) within CIDR block 177.87.200.0/22. Primary risk factors include DNSBL listings on 2 of 8 reputation lists with high severity, geolocation signal inconsistencies, and residential network classification.

## Ownership and Network Classification

• Organization: iFIBRA TELECOM
• ASN: 52587
• CIDR Block: 177.87.200.0/22
• Network Type: Residential Endpoint
• RIR: LACNIC

## Geolocation Analysis

Geolocation data presents conflicting signals. Current profile indicates New York, US, while historical observations show Guarapuava, Paraná, Brazil. This geolocation inconsistency warrants monitoring and may indicate proxy usage or misconfigured location databases.

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threat Indicators: None detected
• Campaign Correlation: 0 matches
• Known Campaigns: None

## Blacklist and Reputation Status

• DNSBL Listings: 2 of 8 lists (high severity)
• Pulsedive Risk: Not available
• Blacklist Count: 0
• Reputation Sources: Present but not detailed in current view

## Neighborhood Analysis

The /24 subnet (177.87.201.0/24) shows an abuse density of 0 with 256 total IPs. Two neighboring IPs detected:

• 177.87.201.130: Risk Score 30, Authority Score 50
• 177.87.201.135: Risk Score 55, Authority Score 50

Risk distribution across neighborhood: 0 high, 1 medium, 1 low.

## DNS and Network Behavior

• PTR Record: 177-87-201-146.ifibratelecom.com.br
• Forward Resolution: Confirmed (1 hostname)
• DNSSEC: Valid
• Open Ports: None detected
• HTTP/HTTPS Services: None active

## Control Plane Data

• Route Stability: False
• RPKI State: Not available
• IRR Consistency: Not available
• Route Changes (30d): 0

## Security Recommendations

The following firewall rules are recommended for immediate implementation:

iptables:

```

iptables -A INPUT -s 177.87.201.146 -j DROP

```

nftables:

```

nft add rule inet filter input ip saddr 177.87.201.146 drop

```

nginx:

```

deny 177.87.201.146;

```

pfSense:

```

177.87.201.146/32

```

Cloudflare WAF:

```json

{

"description": "Block 177.87.201.146 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 177.87.201.146"

}

}

```

AWS WAF:

```json

{

"Addresses": ["177.87.201.146/32"],

"Description": "IPDebrief risk 40"

}

```

## Intelligence Assessment

This IP should be blocked at the network perimeter. The combination of DNSBL listings with high severity, geolocation inconsistencies between US and Brazil, and residential classification suggests potential misuse. Monitor for any correlation with known attack campaigns or additional threat indicators in future observations. The neighborhood shows no elevated abuse density, suggesting this IP may be the primary concern within the subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.