179.106.94.111📋 Copy

IP INTELLIGENCE BRIEFING

Target: 179.106.94.111/32

Classification: Defensive Analysis

Date: Intelligence generated from current observation data

---

Executive Summary

IP address 179.106.94.111 presents a low-risk profile with a risk score of 25. The IP is geolocated to Joinville, Santa Catarina, Brazil, and is associated with network infrastructure provider ASN 28343. No active threat indicators, blacklist entries, or malicious campaigns were identified. The IP demonstrates firewalled behavior with no open services.

---

Network Profile

---

Threat Intelligence Indicators

• Blacklist Status: Listed on 1 of 8 DNSBL feeds
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable
• Threat Persistence: 0 days observed
• Persistent Malicious Activity: No

---

Control Plane Analysis

• Route Stability: Unstable (isRouteStable: false)
• Route Changes (30d): 0
• RPKI State: Not validated
• IRR Consistency: Not available
• MOAS Status: No
• Operator Score: 0.1304 (Minimal)
• DNSSEC: Validated

---

Observational History

Analysis of 12 signal observations reveals consistent geolocation data from multiple sources (MaxMind GeoLite2, Cymru). The IP has maintained its Brazilian location attribution throughout the observation window. No significant changes in threat profile or network classification were observed.

---

Network Relationships

• DNS Associations: 179-106-94-111.unifique.net
• Related Organizations: None identified
• Linked Subnets: None detected
• Related Hosts: None identified

---

Neighborhood Analysis

Subnet 179.106.94.0/24 shows zero neighboring IPs with detectable activity. Abuse density is 0, indicating this subnet is not associated with coordinated malicious activity.

---

Recommended Actions

Given the low risk score (25) and absence of active threat indicators, standard monitoring is appropriate. No immediate blocking or firewall rules are recommended. The IP may be passed to upstream infrastructure providers for verification if traffic patterns warrant further investigation.

Action Priority: Monitor

Blocking Recommendation: No

---

Analysis Notes: The IP demonstrates benign characteristics consistent with a firewalled infrastructure endpoint. The single DNSBL listing warrants awareness but does not indicate active malicious behavior.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.