181.64.27.117📋 Copy

# IP Intelligence Briefing: 181.64.27.117/32

## Executive Summary

IP address 181.64.27.117 presents a low-risk profile with a risk score of 15. The address is assigned to ASN 6147 (PE-TDPERX6-LACNIC) within the 181.64.0.0/19 block. No active threat indicators, malicious campaigns, or significant abuse patterns were identified during analysis.

## Technical Profile

• Risk Score: 15 (Low Risk)
• ASN: 6147
• Organization: PE-TDPERX6-LACNIC
• CIDR Block: 181.64.0.0/19
• Abuse Contact: Available via RDAP (tommy.tomaylla@telefonica.com)
• Network Classification: Firewalled / No Services
• ISP/Provider Score: 0
• Authority Score: 0
• Stability Score: 0

## Geolocation Analysis

Geolocation data shows inconsistencies between sources:

• Primary consensus: United States (New York, NY)
• Secondary reports: Peru (Lima)
• Geo-plausibility assessment: False
• Multiple geo-source consensus not achieved

## Threat Indicators

• Blacklist Count: 0
• DNSBL Listed: 1 of 8 DNSBLs queried
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threat Indicators: None detected
• Campaign Associations: None identified

## Network Activity

• Open Ports: None detected
• TLS Certificates: None
• DNS Records: No forward resolution
• PTR Hostnames: None
• Email Authentication: No SPF or DMARC records
• HTTP Services: None responding

## Observation History

Analysis of 13 historical observations indicates:

• No ownership changes recorded
• No persistent malicious activity detected
• Threat observation count: 0
• Recent signals show consistent provider attribution (PE-TDPERX6-LACNIC)

## Network Neighborhood

• Subnet: 181.64.27.117/24
• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• Inherited Risk: 0

## Relationship Graph

Single relationship identified:

• Same Network: 181.64.0.0 - 181.64.31.255

## Control Plane Data

• BGP Prefix: 181.64.0.0/19
• Route Stability: False
• RPKI State: Not verified
• Operator Score: 0.1304 (Minimal)

## Recommendations

Based on the low-risk profile and absence of active threat indicators, the following actions are recommended:

1. Monitor: Continue monitoring due to geolocation inconsistencies between sources

2. DNSBL Review: Investigate the single DNSBL listing to determine origin and relevance

3. Baseline: Establish baseline activity for this IP as it appears to be firewalled with no services

4. No Immediate Action Required: No blocking or mitigation actions recommended based on current risk profile

## Conclusion

IP 181.64.27.117 represents a low-risk infrastructure address with no evidence of malicious activity. The geolocation discrepancies between US and Peru reports warrant continued observation but do not constitute immediate threat indicators. The IP appears to be firewalled with no active services, consistent with legitimate infrastructure that may not require public-facing services.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.