187.85.89.128📋 Copy

IP Intelligence Briefing: 187.85.89.128/32

Date: 2026-05-30

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Ownership: VERO S.A (AS28258, Brazil)
• Geolocation: Brazil (Minas Gerais, Barbacena), inferred with 2500km accuracy radius.
• Network Role: Firewalled / No Services (no open ports, TLS, or HTTP services detected).
• Threat Indicators: No direct malicious activity (no known attackers, spam, or campaigns). However, 6 DNSBL listings (8 total lists) suggest potential abuse.

---

**2. Observation History**

• Recent Activity:

- DNSBL listings (7/8 lists) detected on 2026-05-30.

- Network prefix 187.85.88.0/22 linked to AS28258 (VERO S.A).

- No persistent malicious behavior; threat observation count = 1.

• Stability: Route instability detected (isRouteStable: false).

---

**3. Relationships**

• Linked Entities:

- Same network (AS28258, 478313).

- No direct links to hostnames, organizations, or certificates.

---

**4. Neighborhood Analysis**

• Subnet: 187.85.89.128/24
• Abuse Density: 1/100 (mostly clean).
• Neighbors: No active or threat siblings detected.

---

**5. Recommendations**

• Monitor: Track DNSBL listings and network stability. Investigate if VERO S.A’s network has broader abuse patterns.
• Block: Consider blocking based on DNSBL reputation if traffic aligns with known malicious patterns.
• Validate: Cross-check geolocation with other sources due to inferred coordinates.

Note: No immediate action required for the IP itself, but contextualize within the ISP’s network behavior.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.