177.152.87.76📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 177.152.87.76/32

Classification: Residential Endpoint

Date: Current Analysis

Status: LOW RISK

---

## EXECUTIVE SUMMARY

The IP address 177.152.87.76 is classified as a low-risk residential endpoint located in São Paulo, Brazil. The address belongs to IWNET TELECOM LTDA ME (ASN 52527) and resolves to www.iwnet.net.br. No active threat indicators, blacklist entries, or known malicious activity were detected. The IP operates within a residential network segment showing low abuse density.

---

## OWNERSHIP & NETWORK CLASSIFICATION

• Organization: IWNET TELECOM LTDA ME
• ASN: 52527
• Network Block: 177.152.84.0/22 (CIDR: 220903)
• RIR: LACNIC
• Network Role: Residential Endpoint
• Geolocation: São Paulo, Brazil (BR)

---

## RISK ASSESSMENT

• Overall Risk Score: 20 (Low Risk)
• Reputation: Low Risk
• Abuse Confidence: Not applicable
• Blacklist Status: Clean (0 blacklists)
• DNSBL Listings: 0/8

Threat Indicators: None detected

• Not a Tor exit node
• Not a known attacker
• Not a spam source
• No active threat feeds associated

---

## NETWORK NEIGHBORHOOD ANALYSIS

Subnet: 177.152.87.0/24

Abuse Density: 60% (profile data)

Classification: Mostly clean

Inherited Risk: 7/100

Neighbor Risk Distribution:

• Total Neighbors: 4
• High Risk: 0
• Medium Risk: 0
• Low Risk: 4

Notable Neighbors:

---

## OBSERVATION HISTORY

Total Signals Observed: 17

Latest Observation: 2026-07-25

Key Historical Signals:

• Geolocation: Consistent São Paulo, Brazil assignment with RTT validation anomaly (126ms observed vs 198.1ms minimum possible for 9904km distance)
• Abuse Density: 0.6 (moderate)
• Network Classification: Mostly clean with inherited risk score of 7
• Operator Score: 0.1304 (Minimal)
• Ownership Changes: 0 (stable ownership)

---

## DNS & SERVICES

• PTR Hostnames: www.iwnet.net.br
• Forward Resolution: www.iwnet.net.br (1 record)
• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None detected
• DNSSEC: Valid

---

## RELATIONSHIP MAPPING

• Network Association: 220903 (multiple entries)
• DNS Associations: www.iwnet.net.br (multiple entries)

---

## SECURITY RECOMMENDATIONS

Based on the low-risk profile and residential classification:

1. Traffic Handling: Allow standard residential traffic patterns

2. Monitoring: No special monitoring required

3. Firewall Rules: Standard residential endpoint rules apply

4. Threat Hunting: No active threat indicators present

Action Required: None

---

## INTELLIGENCE CONFIDENCE

• Data Sufficiency: 83.3% (6/6 dimensions covered)
• Overall Confidence: Low-Moderate (varies by signal type)
• Persistence: Not persistently malicious
• Campaign Association: None identified

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.