187.120.188.43📋 Copy

# IP Intelligence Briefing: 187.120.188.43/32

## Executive Summary

IP address 187.120.188.43 presents a LOW RISK profile with an overall risk score of 25. The address is associated with Connecta Telecom Internet Ltda, a Brazilian internet service provider, and shows no active threat indicators. The /24 subnet is classified as clean with zero abuse density.

---

## Technical Profile

---

## Network Classification

• Infrastructure Type: Firewalled / No Services
• Cloud/CDN/Proxy: No
• Tor/VPN: No
• Mobile/Residential: No
• Hosting: No
• Bogon: No

---

## DNS Analysis

• Reverse DNS: 187-120-188-43.connectatelecom.net.br
• Forward Resolution: Confirmed
• Hosted Domains: None
• Email Auth (SPF/DMARC): Not configured
• DNSBL Listings: 1 out of 8 total lists

---

## Threat Indicators

• Abuse Confidence Score: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None
• Blacklist Count: 0

---

## Services & Ports

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None

---

## Neighborhood Analysis (Subnet: 187.120.188.0/24)

• Abuse Density: 0 (Clean)
• Risk Distribution: 0 High, 0 Medium, 0 Low
• Active Siblings: 0
• Threat Siblings: 0
• Classification: Clean

---

## Observation History

• Total Observations: 18 signals recorded
• Most Recent: 2026-07-29
• Ownership Changes: 0 (Stable)
• Threat Persistence: None detected
• Persistently Malicious: No

---

## Relationship Graph

• DNS Associations: 4 entries (hostname: 187-120-188-43.connectatelecom.net.br)
• Network Relationships: 2 entries (network: 517169)
• Organization/Certificate Links: None

---

## Control Plane Assessment

• Route Stability: Unstable
• Route Changes (30d): 0
• RPKI State: Not applicable
• IRR Consistency: Not applicable
• DNSSEC Valid: Yes

---

## Recommended Actions

No immediate blocking or mitigation actions recommended. The IP address exhibits normal characteristics for a residential/comsumer internet connection in Brazil with no malicious activity detected.

---

## Intelligence Assessment

This IP address is a low-priority target for SOC monitoring. The risk profile is consistent with a legitimate consumer-grade internet connection. The single DNSBL listing requires no action given the absence of other threat indicators. Continuous monitoring is recommended as standard practice, but no immediate threat response is warranted.

Classification: LOW PRIORITY / STANDARD MONITORING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.