181.115.97.76📋 Copy

# IP Intelligence Briefing: 181.115.97.76/32

Date: 2026-07-22

Classification: Low Risk

Risk Score: 25/100

---

## Executive Summary

IP address 181.115.97.76 is associated with Honduras (Tegucigalpa) and presents minimal threat indicators. The address is firewalled with no active services detected. While listed on one DNS blacklist, overall threat activity remains negligible with no evidence of malicious campaigns or known attacker patterns.

---

## Technical Profile

Geolocation: Honduras (HN) • Tegucigalpa, Francisco Morazán Department

Coordinates: 14.08°N, 87.20°W

ASN: 14754

BGP Prefix: 181.115.64.0/18

Network Classification: Firewalled / No Services

Ownership: No organization or provider details available in current databases.

DNS Status:

• Forward resolution: Confirmed
• DNSSEC: Valid
• Hosted domains: 0
• Email authentication (SPF/DMARC): Not configured

Network Services:

• Open ports: None detected
• TLS certificates: None
• HTTP title: None
• Service banner: None

---

## Threat Indicators

Current Status:

• Known attacker: No
• Tor exit node: No
• Spam source: No
• Blacklist count: 0 (traditional lists)
• DNSBL listings: 1 of 8 lists
• Abuse confidence: Not applicable

Threat Feeds: No known campaigns or threat feed matches detected.

Behavioral Signals:

• Honeypot hits: 0
• Enumeration strikes: 0
• WAF violations: 0
• Total incidents: 0

---

## Observation History

Seven observations recorded as of 2026-07-22:

• Geolocation signals: Consistent Honduras attribution (maxmind-geolite2-city)
• DNSSEC validation: Valid RRSIG confirmed
• Operator scoring: Minimal risk (0.1304)
• Blacklist monitoring: One high-severity DNSBL listing detected

No evidence of escalating threat activity or ownership changes.

---

## Neighborhood Analysis

Subnet: 181.115.97.76/24

Abuse Density: 0

Neighbor Count: 0

Risk Distribution: No high or medium-risk neighbors identified

The /24 subnet shows no neighboring threat activity, indicating isolated operation.

---

## Relationship Graph

No relationships detected to related entities, organizations, subnets, or certificates.

---

## Recommended Actions

Security Posture: Monitor but no immediate action required.

Firewall Rules: No specific blocking recommendations based on current risk profile. The IP's firewalled status and low risk score suggest it is not actively conducting malicious operations.

SOC Guidance:

• The single DNSBL listing warrants periodic re-evaluation
• No immediate blocking or rate-limiting required
• Monitor for any emergence of open services or new threat indicators
• Consider geofencing if organization has strict Honduras-based access policies

---

Intelligence Confidence: Moderate

Data Sources: 4 total observations across DNS, geolocation, routing, and reputation dimensions

Last Updated: 2026-07-22

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.