187.109.133.230📋 Copy

# IP Intelligence Briefing: 187.109.133.230

## Executive Summary

IP 187.109.133.230 is classified as Moderate Risk (Risk Score: 40). The address is associated with a Brazilian residential/corporate wireless device with no active open ports. While the IP has been flagged on 2 of 8 DNSBL lists, no active threat indicators or malicious campaigns have been detected. The IP belongs to Desktop Sigmanet Comunicação Multimídia SA (ASN 28668) in Bauru, São Paulo.

## Ownership and Registration

• Organization: Desktop Sigmanet Comunicação Multimídia SA
• ASN: 28668
• CIDR Block: 187.109.128.0/20
• Netname: 138284
• RIR: LACNIC (Latin America)
• Geolocation: Bauru, São Paulo, Brazil (BR)

## Network Role and Classification

• Infrastructure Type: Residential/Customer Premises Equipment
• Service Purpose: Firewalled / No Services
• Not Classified As: Cloud, CDN, VPN, Proxy, Tor Exit, Hosting, Mobile Carrier
• DNS PTR Hostname: 187-109-133-230-wlan.lpnet.com.br (Wireless LAN device)
• Forward Resolution: Confirmed

## Threat Indicators

• Blacklist Count: 2 DNSBL listings
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Threat Persistence: 0 days observed
• Persistently Malicious: No
• Known Campaigns: None detected

## Risk Assessment

• Overall Risk Score: 40 (Moderate)
• Provider Score: 0
• Authority Score: 0
• Abuse Density (Subnet): 0
• Inherited Risk: 0
• Threat Siblings in /24: 0
• Active Siblings: 0

## Operational Observations

• Open Ports: None detected (firewalled)
• TLS/SSL: No certificates observed
• HTTP Services: No active web services
• Operator Score: 0.2609 (Basic)
• BGP Prefix: 187.109.132.0/22

## Intelligence Narrative

The IP address 187.109.133.230 represents a Brazilian residential or small business wireless endpoint. The DNS hostname indicates a wireless LAN device, consistent with a customer premises equipment (CPE) connection. While the IP shows moderate risk scoring (40), the absence of open ports suggests the device is properly firewalled. The 2 DNSBL listings may indicate historical activity or false positives from automated reputation systems, but no current malicious behavior is observed.

The subnet (187.109.133.0/24) shows zero abuse density with no active sibling threats, indicating this IP operates in isolation from broader malicious activity. The organization Desktop Sigmanet Comunicação Multimídia SA is a legitimate Brazilian telecommunications provider.

## Recommended Actions

• Monitor: Maintain passive monitoring; no immediate blocking required
• Threat Context: Low priority threat; no active indicators of compromise
• Classification: Residential/Corporate Endpoint - Not infrastructure
• Firewall Rule: No action required (no open services detected)

---

*Intel generated: 2026-07-25 | Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.