187.49.87.163📋 Copy

# IP Intelligence Briefing: 187.49.87.163/32

Classification: Moderate Risk

Date: 2026-07-25

Prepared by: IPDebrief Intelligence

---

## Executive Summary

IP address 187.49.87.163 is associated with Acqua Telecom infrastructure in Balneário Camboriú, Santa Catarina, Brazil (ASN 28142). The IP presents a moderate risk score (55/100) with evidence of blacklist listings and inconsistent route stability. No active services or open ports were detected.

---

## Network Profile

---

## Threat Indicators

• DNSBL Status: Listed on 3 of 8 monitored DNSBLs with high-severity classifications
• Service Exposure: No open ports or active services detected
• Campaign Association: No known threat campaigns correlated
• Tor/Proxy: Not identified as Tor exit node, proxy, or CDN

---

## Observations History

Thirteen signal observations recorded, with recent activity from 2026-07-25:

• Geolocation: High-confidence (0.95) ASN and organizational data confirmed via AlienVault OTX
• Blacklist Status: Multiple blacklist listings detected with high severity
• Route Stability: Inconsistent routing observed; not classified as MOAS

---

## Network Relationships

• DNS Association: 187.49.87.163.acquatelecom.com.br
• Subnet Analysis: No active neighboring IPs detected in 187.49.87.0/24 subnet
• Abuse Density: 0 (no elevated neighborhood risk)

---

## Recommended Security Actions

Primary Recommendation: Increase logging verbosity and review recent activity from this IP

Firewall Rules (Recommended):

```bash

# iptables

iptables -A INPUT -s 187.49.87.163 -j DROP

# nftables

nft add rule inet filter input ip saddr 187.49.87.163 drop

# nginx

deny 187.49.87.163;

# pfSense

187.49.87.163/32

# Cloudflare WAF

ip.src eq 187.49.87.163 → BLOCK

# AWS WAF

Addresses: 187.49.87.163/32 → BLOCK

```

---

## Intelligence Assessment

The IP presents moderate risk due to blacklist associations and inconsistent routing patterns. While no active malicious services were observed, the presence on multiple DNSBLs with high-severity ratings warrants defensive blocking. The infrastructure appears to be legitimate telecom equipment (Acqua Telecom), but the observed threat signals suggest potential abuse or misconfiguration.

Priority: Monitor and consider blocking based on organizational risk tolerance.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.