181.115.171.104📋 Copy

IP Intelligence Briefing: 181.115.171.104

Date: 2026-06-12

---

**1. Risk Profile**

• Risk Score: 80 (High Risk)
• Provider: EMPRESA NACIONAL DE TELECOMUNICACIONES SOCIEDAD ANONIMA (Peru)
• Network Type: Residential (AS6568)
• Geolocation: Lima, Peru (LACNIC registry)

---

**2. Threat Indicators**

• DNSBL Listings: Identified in 4/8 DNSBL lists (e.g., Spamhaus, OpenDNS).
• No Direct Malware Indicators: No known campaigns, TLS certs, or open ports detected.
• Subnet Abuse: 13.3% abuse density in the 181.115.128.0/17 subnet.

---

**3. Network Context**

• Subnet Neighbors:

- 15 IPs in 181.115.171.0/24.

- High-Risk Neighbors: 181.115.171.118 (80), 181.115.171.151 (80), 181.115.171.103 (70).

- Low-Risk Majority: 8 IPs with 0–55 risk scores.

---

**4. Historical Observations**

• Recent Activity (2026-06-12):

- DNS resolution confirmed (DNSSEC valid).

- No persistent threats or long-term malicious activity detected.

- 4/8 DNSBL lists flagged the IP in the last 24 hours.

---

**5. Recommendations**

• Monitor Traffic: Due to residential subnet and DNSBL ties, monitor for unexpected outbound connections or C2 activity.
• Block High-Risk Neighbors: Consider isolating IPs with 80-risk scores (e.g., 181.115.171.118) if they exhibit suspicious behavior.
• Investigate Subnet: The 181.115.128.0/17 subnet has a 13.3% abuse density; prioritize scanning for misconfigured devices or botnet participation.
• Verify Ownership: Confirm the ISP’s (EMPRESA NACIONAL DE TELECOMUNICACIONES) policies for residential IP allocation to assess potential spoofing risks.

---

Next Steps: Correlate this IP with DNS or email logs for potential spam or phishing activity. Use network segmentation to limit exposure from high-risk neighbors.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.