187.120.73.116📋 Copy

IP Intelligence Briefing: 187.120.73.116

Date: 2026-06-09

---

**1. Core Risk Profile**

• Risk Score: 80 (High Risk)
• Provider: MASTER S/A (AS28202), Brazil
• Geolocation: Minas Gerais, Brazil (Delfim Moreira)
• Network Role: Firewalled / No Services
• Threat Indicators:

- Listed in 5+ DNSBLs (abuse confidence score 0.425)

- Observed in 18 threat feeds (confidence 0.52–0.85)

- No open ports or TLS certificates detected

---

**2. Observation History**

• Recent Activity (2026-06-09):

- Flagged in AlienVault OTX (reputation: 0, pulse count: 1)

- Inferred geolocation (latitude -14.24, longitude -51.93, accuracy: 2500km)

- 4/8 DNSBL listings (high severity)

- BGP prefix 187.120.72.0/23 (AS28202)

• Trend: No persistent malicious activity; 0 threat observations in 30 days.

---

**3. Network Relationships**

• DNS Associations:

- 187-120-73-116.pso-fb.mastercabo.com.br (PTR record)

• Subnet: 187.120.73.116/24
• Neighbors:

- 17 high-risk IPs (80–55 risk scores)

- Mixed abuse density (0.425), with 17/40 siblings flagged in threat feeds.

---

**4. Neighborhood Analysis**

• Subnet (187.120.73.116/24):

- Abuse Density: 42.5% (mixed risk)

- Active Neighbors: 15/40

- High-Risk Neighbors:

- 187.120.73.111 (80), 187.120.73.118 (55), 187.120.73.153 (80)

- Low-Risk Neighbors: 26 IPs (0–40 risk scores)

---

**5. Recommendations**

• Block IP: High-risk score (80) and multiple DNSBL listings suggest potential malicious activity.
• Monitor Subnet: 17/40 neighbors are flagged in threat feeds; prioritize investigation.
• Review DNS: Investigate 187-120-73-116.pso-fb.mastercabo.com.br for potential C2 or phishing domains.
• Check BGP: Monitor AS28202 for route changes or anomalous traffic patterns.

Next Steps: Correlate with internal logs, validate DNS records, and assess if subnet-wide mitigation is required.

---

*Generated by IPDebrief – Network Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.