# IP Intelligence Briefing: 177.185.242.27/32
## Executive Summary
IP 177.185.242.27 presents a LOW RISK threat profile with a risk score of 0. The address is associated with GoXInternet infrastructure (goxinternet.com.br) and is geolocated to Brazil. No active threat indicators, blacklist listings, or malicious behavior were observed. The IP is currently firewalled with no open services.
## Profile Overview
- Risk Score: 0 (Low Risk)
- Provider/Authority/Stability Scores: 0/0/0
- Geolocation: Brazil (BR) - multiple geolocation providers confirm South American origin
- Network Classification: Firewalled / No Services
- ASN: 263623
- BGP Prefix: 177.185.242.0/24
## DNS Resolution
- PTR Hostname: 177-185-242-27.goxinternet.com.br
- Forward Resolution: Confirmed
- Domain: com.br (Brazilian TLD)
- Email Authentication: No SPF or DMARC records detected
## Threat Assessment
- Blacklist Status: Not listed on any major threat feeds
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Threat Indicators: None detected
- Associated Campaigns: None
## Service Analysis
- Open Ports: None detected
- TLS Certificate: Not observed
- HTTP Title: Not observed
- Active Services: No services currently listening
## Observation History (11 Signals)
Recent signal activity from 2026-07-30 indicates:
- Geolocation: Consistent Brazil attribution (BR), with confidence scores ranging from 0.35 to 0.70
- Specific Location: Itaúna, Minas Gerais, Brazil detected by MaxMind Geolite2
- Threat Scoring: Low-dimensional signals with 3/6 dimensions covered
- DNSBL Status: 8 total lists queried with 0 actual listings
## Network Relationships
- DNS Associations: 177-185-242-27.goxinternet.com.br
- Related Entities: Single hostname association detected
- Campaign Correlations: None identified
## Subnet Neighborhood Analysis
- Subnet: 177.185.242.0/24
- Abuse Density: 0 (low abuse activity)
- Neighbor Count: 1 detected (177.185.242.159)
- Neighbor Risk: 177.185.242.159 shows risk score 25, authority score 60
- Classification: Low risk subnet classification
## Recommended Actions
Based on the risk profile, no immediate firewall or blocking actions are required. The IP demonstrates:
- Clean reputation with zero risk score
- No active threat indicators or malicious behavior
- Stable ownership patterns with no recent changes
- Low-activity network profile
## Intelligence Conclusion
IP 177.185.242.27 is a benign, residential or infrastructure address associated with GoXInternet in Brazil. The IP shows no evidence of malicious activity, command and control behavior, or participation in known threat campaigns. The subnet environment is clean with minimal abuse density. SOC analysts may monitor but no immediate defensive actions are warranted.
Confidence Level: High
Last Updated: 2026-07-30
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | GOX S.A. |
| ASN | AS263623 |
| Network Name | 212191 |
| CIDR Block | 177.185.240.0/20 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | โ |
๐ DNS Intelligence
| PTR | 177-185-242-27.goxinternet.com.br |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 177-185-242-27.goxinternet.com.br |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) โ 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-26 21:27:58 UTC |
| Last Seen | 2026-08-09 16:59:16 UTC |
| Profile Built | 2026-08-08 04:27:59 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.