187.0.0.114📋 Copy

# IP Intelligence Briefing: 187.0.0.114/32

## Executive Summary

IP address 187.0.0.114 is classified as Low Risk with a risk score of 25/100. The address is registered to WOHLENBERG & WOHLLENBERG LTDA (ASN 28283) within the LACNIC region and is geolocated to Nova Prata, Rio Grande do Sul, Brazil. Current observations indicate minimal malicious activity, with no open services detected and no known threat associations.

## Technical Profile

• IP Address: 187.0.0.114/32
• Risk Score: 25 (Low Risk)
• ASN: 28283
• Organization: WOHLENBERG & WOHLLENBERG LTDA
• Network Block: 187.0.0.112/28
• RIR: LACNIC
• Geolocation: Brazil (BR), Rio Grande do Sul, Nova Prata
• DNS Record: 187-0-0-114.adyl.net.br

## Threat Assessment

No active threat indicators were identified:

• Abuse Confidence Score: Not applicable (low risk profile)
• Blacklist Status: Listed on 1 of 8 DNS blacklists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Associations: None detected

## Network Behavior

• Service Status: No open ports detected; classified as "Firewalled / No Services"
• Infrastructure Type: Not CDN, not cloud-based, not hosting provider
• Connection Type: Not residential, mobile, or proxy
• Reverse DNS: Present (187-0-0-114.adyl.net.br)
• Forward Resolution: Unconfirmed

## Historical Observations

Twelve observations have been recorded with the most recent activity on 2026-07-22. Signal confidence levels ranged from 0.12 to 0.95 across various data dimensions. No persistent malicious behavior observed; threat observation count remains at zero.

## Subnet Analysis (187.0.0.0/24)

• Abuse Density: 0 (No abuse activity detected)
• Neighbor Count: 0 (No sibling IPs with data)
• Risk Distribution: None (No high/medium risk IPs in neighborhood)
• Active Threat Siblings: 0

## Network Relationships

Four relationships were identified:

1. Same Network: 421808 (Network identifier)

2. DNS Associations: Three entries all referencing 187-0-0-114.adyl.net.br

## Recommended Actions

Based on the low-risk profile (score 25), no immediate security actions are recommended. However, the following should be considered:

• Monitor for changes in service status or blacklist listings
• Verify the Comcast transit path anomaly (unexpected for Brazilian origin)
• Review the single blacklist listing if additional context emerges

## Intelligence Note

The IP exhibits unusual routing characteristics (14-hop traceroute with 5 timed-out hops, transit through Comcast) that warrant periodic review. The geo-validation flag indicates geoPlausible=false, suggesting potential location data discrepancies. Despite these anomalies, the overall threat profile remains low with no evidence of malicious activity or abuse.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.