189.89.211.131📋 Copy

IP Intelligence Briefing: 189.89.211.131

Date: 2026-06-11

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Network Provider: Stratus Telecomunicacoes Ltda (AS28187)
• Geolocation: Brazil (Minas Gerais, Lavras)
• Network Role: Residential endpoint
• Threat Indicators: No direct malicious activity detected (no known attackers, spam, or campaigns).
• DNS: Linked to `as28187.mg.stratus.com.br` (PTR record).
• Subnet: 189.89.211.0/24 (abuse density: 33.3%).

---

**2. Observation History**

• Geolocation: Inferred as Brazil (confidence: 52%) with 2500 km accuracy radius.
• DNSBL Listings: Listed in 3/8 DNSBLs (high severity).
• Network Stability: Route stability score: 0.13 (Minimal operator risk).
• Behavioral Flags: No honeypot hits or enumeration strikes.

---

**3. Relationships**

• Network: Same AS (AS28187) and subnet (109775).
• DNS Associations: Repeatedly tied to `as28187.mg.stratus.com.br`.
• Certificates/TLS: No TLS certs or HTTP services detected.

---

**4. Neighborhood Analysis**

• Subnet (189.89.211.0/24):

- 3 total siblings; 1 high-risk neighbor (189.89.211.199, risk score: 80).

- Abuse density: 33.3% (1 high-risk, 1 medium, 1 low).

• Notable Neighbors:

- 189.89.211.199: High-risk peer (score: 80).

- 189.89.211.125/160: Lower risk (scores: 40/30).

---

**5. Recommendations**

• Monitor DNSBL Listings: Investigate why this IP is listed in 3 DNSBLs.
• Check Neighboring IPs: Focus on 189.89.211.199 for potential lateral movement or shared infrastructure risks.
• Verify DNS Configuration: Ensure `as28187.mg.stratus.com.br` is not misconfigured or used for malicious purposes.
• Geolocation Validation: Confirm if the inferred Brazil location aligns with network behavior.

Conclusion: This residential endpoint shows no direct malicious activity but has DNSBL associations and a high-risk neighbor. Monitor for changes in threat indicators or network behavior.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.