187.85.104.44
IP Intelligence Briefing: 187.85.104.44
*Generated via IPDebrief Analysis*
---
**Core Profile**
- Risk Score: 80 (High Risk)
- Ownership: UNIFIQUE TELECOMUNICACOES S/A (Brazilian ISP)
- Geolocation: Rio Grande do Sul, Brazil (Coordinates: -30.61, -53.47)
- Network Role: Firewalled / No Services (No open ports or TLS/HTTP activity)
- DNS: Resolves to `187-85-104-44.unifique.net` with SPF validation but no DMARC.
- Control Plane: BGP prefix `187.85.96.0/20`, DNSSEC valid, 4 DNSBL listings (medium/high severity).
---
**Threat & Behavior**
- Threat Indicators: No direct malware/campaign associations.
- Historical Trends:
- Minimal risk score (0.15) over 30 days.
- DNS-related observations (19 total) with mixed confidence (0.19–0.85).
- No persistent malicious activity or network anomalies.
---
**Network Relationships**
- Subnet: `187.85.104.0/24` (8 total neighbors).
- Neighbor Risk:
- 2 IPs with high risk (80, 55).
- 5 medium-risk IPs (55), 1 low-risk IP (0).
- Subnet Abuse Density: 25% (moderate risk).
---
**Actionable Insights**
1. Monitor Subnet: The subnet contains high-risk neighbors; isolate or monitor for lateral movement.
2. DNS Security: Validate SPF/DKIM configurations for `unifique.net` due to DNSBL listings.
3. Firewall Rules: Consider blocking high-risk neighbors (e.g., `187.85.104.98`, `187.85.104.155`) if they are not authorized.
4. Geolocation Verification: Confirm Brazil-based traffic is legitimate, as geolocation is plausible but not definitively verified.
---
*No direct malicious indicators detected, but elevated subnet risk and DNSBL presence warrant further investigation.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | UNIFIQUE TELECOMUNICACOES S/A |
| ASN | AS28343 |
| Network Name | 517703 |
| CIDR Block | 187.85.96.0/20 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | 187-85-104-44.unifique.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 187-85-104-44.unifique.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 39% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 13% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 18% | 8 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-17 03:08:08 UTC |
| Last Seen | 2026-06-16 06:17:38 UTC |
| Profile Built | 2026-06-08 04:09:16 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.