201.216.109.180📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 201.216.109.180/32

Classification: Moderate Risk

Report Date: 2026-07-31

---

## EXECUTIVE SUMMARY

IP 201.216.109.180 belongs to OMEGA_NET LTDA (ASN 270329), a Brazilian network operator based in Rondônia. The IP maintains a moderate risk score of 50 with no active threat indicators. The subnet (201.216.109.0/24) exhibits clean abuse density with no high-risk neighbors.

---

## OWNERSHIP AND GEOLOCATION

Organization: OMEGA_NET LTDA

ASN: 270329

Network Block: 201.216.108.0/22

Geolocation:

• Country: Brazil (BR)
• Region: Rondônia
• City: Ouro Preto do Oeste
• Coordinates: -14.24, -51.93 (±2500km accuracy)

Contact: Abuse contact not publicly listed.

---

## THREAT INDICATORS

Current Risk Score: 50 (Moderate)

Threat Assessment:

• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Blacklist Count: 0
• Known Campaigns: None
• Threat Observation Count: 0

DNSBL Status: Listed on 2 of 8 threat intelligence feeds.

---

## NETWORK CLASSIFICATION

Infrastructure Type: Firewalled / No Services

Service Status: No open ports detected

DNS Resolution:

• PTR Hostname: dynamic.201.216.109.180.centralnetro.com.br
• Forward Resolution: Confirmed
• Hosted Domains: 0

Control Plane:

• Route Stability: Unstable (isRouteStable: false)
• RPKI State: Unknown
• Route Changes (30d): 0

---

## OBSERVATION HISTORY

Total Observations: 17 signals

Latest Signal: 2026-07-31T04:51:09 UTC

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: False
• Average Ownership Days: Not recorded

Recent Signal Types:

1. Port/Service Scan (Confidence: 70%)

2. Ownership Verification (Confidence: 85%)

3. Geolocation Inference - Brazil (Confidence: 52%)

4. Subnet Analysis - Clean Classification (Confidence: 40%)

5. ASN/Geolocation Data from AlienVault OTX (Confidence: 50%)

---

## RELATIONSHIP MAPPING

Network Associations: Network 378425 (multiple entries)

DNS Associations:

• dynamic.201.216.109.180.centralnetro.com.br (5 relationship entries)
• Forward confirmation status: False

Related Entities: No additional IPs, organizations, or certificates identified.

---

## NEIGHBORHOOD ANALYSIS

Subnet: 201.216.109.0/24

Abuse Density: 0 (Clean)

Neighbor Count: 0 active siblings

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 0
• Threat Siblings: 0

---

## RECOMMENDED ACTIONS

Risk Score: 50

Recommendations: None (insufficient threat evidence to warrant blocking)

Firewall Rules (if required):

```bash

# iptables

iptables -A INPUT -s 201.216.109.180 -j DROP

# nftables

nft add rule inet filter input ip saddr 201.216.109.180 drop

# nginx

deny 201.216.109.180;

# pfSense

201.216.109.180/32

# Cloudflare WAF

{description: "Block 201.216.109.180 — IPDebrief risk score 50", action: "block"}

# AWS WAF

{Addresses: ["201.216.109.180/32"], Description: "IPDebrief risk 50"}

```

---

## ANALYST NOTES

This IP represents a dynamic residential/business assignment from a Brazilian provider with moderate risk scoring. The absence of open services and zero threat indicators suggests benign network usage. DNSBL listings may indicate historical reputation issues but no current malicious activity detected. The clean subnet profile and lack of neighbor threats support continued monitoring rather than immediate blocking.

Assessment Level: Low Threat

Recommended Action: Monitor or allow based on organizational policy.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.