187.109.128.219📋 Copy

# IP Intelligence Briefing: 187.109.128.219/32

Date: Current Analysis Cycle

Classification: Low Risk / Clean

Assigned Analyst: SOC Intelligence Team

---

## Executive Summary

IP address 187.109.128.219 is a residential IPv4 endpoint with an overall risk score of 15 (Low Risk). The IP belongs to Desktop Sigmanet Comunicação Multimídia SA and is located in Bauru, São Paulo, Brazil. No active threat indicators, blacklist entries, or malicious campaign associations were detected during analysis.

---

## Profile Overview

---

## Threat Indicators Assessment

• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Blacklist Count: 0
• Active Threat Campaigns: None
• Threat Persistence Days: 0
• Is Persistently Malicious: False

No malicious activity patterns observed. The IP has not been associated with any known threat actors, spam operations, or attack campaigns.

---

## Network Classification

• Provider/Infrastructure: False
• Cloud Service: False
• CDN: False
• VPN/Proxy: False
• Hosting Service: False
• Mobile Carrier: False
• Bogon Address: False
• Anycast: False

The IP is classified as a residential endpoint with no services exposed. Open ports, TLS certificates, and HTTP titles are absent, indicating the host is either unconfigured or actively firewalled.

---

## Control Plane Analysis

• Route Stability: False
• RPKI State: Not validated
• DNSBL Listed: 1 of 8 lists
• Operator Score: 0.2609 (Basic)
• BGP Prefix: 187.109.128.0/22
• IRR Consistency: Not assessed

One DNSBL listing detected across 8 monitored lists. This may warrant monitoring but does not indicate active malicious use.

---

## Observation History (14 Signals)

Recent signal observations (2026-07-24):

• Geolocation: Consistent Brazil attribution (São Paulo region)
• ASN: 28668 / lacnic RIR
• Subnet Classification: Clean, abuse_density: 0
• Provider Signals: No provider/service indicators
• Confidence Range: 0.30 - 0.95

No significant temporal changes detected. Geolocation and ownership data remain stable across the observation period.

---

## Neighborhood Analysis

The /24 subnet shows no neighbor risk contributions. No threat-sibling IPs detected in the immediate network vicinity.

---

## Relationships

• DNS Associations: 187-109-128-219-wlan.lpnet.com.br
• Network Association: 138284
• Total Relationships: 5

Relationships are limited to DNS and network-level associations with no external malicious entity links.

---

## Recommended Actions

Current Risk Level: LOW

• No immediate blocking recommended based on current risk profile.
• Monitor the single DNSBL listing for changes.
• Standard logging applies for residential IP traffic patterns.
• No firewall rules required at this time.

---

## Intelligence Conclusion

IP 187.109.128.219 presents as a legitimate residential endpoint with minimal threat indicators. The absence of malicious activity, combined with a clean subnet neighborhood and stable ownership records, supports treating this IP as non-malicious. Continue standard traffic monitoring without additional defensive measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.