200.146.252.10📋 Copy

# Intelligence Briefing: 200.146.252.10

## Executive Summary

IP address 200.146.252.10 is classified as High Risk (Score: 80/100) with a reputation designation of High Risk. The IP is geolocated to Piracicaba, São Paulo, Brazil, and is associated with Algarte Telecom infrastructure. While no active threat indicators or malicious campaigns were detected, the IP is listed on 5 of 8 DNSBLs, warranting defensive monitoring.

## Risk Assessment

• Risk Score: 80 (High Risk)
• Provider Score: 0 (No provider-specific threat data)
• Authority Score: 0
• Operator Score: 0.1304 (Minimal)
• DNSBL Status: Listed on 5 out of 8 threat feeds
• Route Stability: False (routing changes detected within 30-day window)

## Network and Infrastructure Details

• ASN: 16735
• BGP Prefix: 200.146.192.0/18
• Geolocation: Brazil (BR), São Paulo (SP), Piracicaba
• Coordinates: -22.71, -47.78
• Timezone: America/Sao_Paulo
• Network Classification: Firewalled / No Services
• ISP Identification: Algarte Telecom (based on DNS hostname)
• PTR Record: 200-146-252-010.static.algartelecom.com.br

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None detected
• Threat Feeds: Empty
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: Not reported

## Service Analysis

• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Hosted Domains: 0
• Email Auth: No SPF or DMARC records configured

## Observation History

A total of 13 observations were recorded during the analysis period. Key findings include:

• Geographic Signals: Multiple signals confirmed Brazil (BR) with varying confidence levels (0.52–0.95).
• ASN Signals: Some signals identified LACNIC RIR registration with org name "Companhia de Telecomunicacoes do Brasil Central."
• Threat Signals: No persistent threat activity observed in historical data.
• Ownership Changes: 0 recorded changes.
• Threat Persistence: 0 days of persistent malicious activity.

## Relationship Analysis

• DNS Associations: Two DNS relationships identified, both pointing to 200-146-252-010.static.algartelecom.com.br
• Subnet Relationships: None detected
• Organization Relationships: None detected
• Certificate Relationships: None detected

## Neighborhood Analysis

• Subnet: 200.146.252.10/24
• Neighbor Count: 0
• Abuse Density: 0
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0
• Threat Siblings: 0

## Traceroute Analysis

• Hop Count: 14
• First Hop RTT: 0.2ms
• Last Hop RTT: 160.3ms
• Timed Out Hops: 3
• Transit Networks: Comcast

## Recommended Actions

Based on the high-risk classification and DNSBL listings, the following actions are recommended:

1. Monitor Traffic: Implement logging and monitoring for outbound/inbound connections from this IP.

2. Block or Rate Limit: Consider implementing firewall rules to block or rate-limit traffic from this address, particularly if internal systems are affected.

3. DNSBL Review: Investigate why the IP appears on 5 DNSBLs to determine if false positives or actual abuse is occurring.

4. Contextual Analysis: Verify if the IP is being used for legitimate purposes (e.g., residential ISP, data center) before implementing blocking measures.

## Conclusion

IP 200.146.252.10 presents elevated risk primarily due to DNSBL listings and route instability, but lacks active threat indicators or malicious behavior. The IP appears to be a residential or consumer ISP address with no open services. Defensive monitoring is recommended, and context-specific blocking should be evaluated based on organizational policies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.