# INTELLIGENCE BRIEFING: 177.227.28.116/32
Classification: Residential Endpoint | Risk Level: Low Risk | Report Date: 2026-07-22
---
## Executive Summary
IP address 177.227.28.116 is a residential endpoint associated with Mega Cable, S.A. de C.V. (AS13999) under LACNIC registry. Current risk assessment indicates low threat potential with zero abuse confidence. No active threat indicators, blacklists, or malicious campaigns detected.
---
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **IP Address** | 177.227.28.116/32 |
| **Organization** | Mega Cable, S.A. de C.V. |
| **ASN** | AS13999 |
| **CIDR Block** | 177.224.0.0/13 |
| **RIR** | LACNIC |
| **Network Role** | Residential Endpoint |
| **Infrastructure Type** | Residential |
| **PTR Hostname** | customer-ZIHU-CGN-28-116.megared.net.mx |
---
## Geolocation Analysis
Observed Locations:
- Primary Signal: Cologne, Germany (DE) - NW Region
- Coordinates: 50.87°N, 7.14°E
- Accuracy: ±75 km
- Timezone: Europe/Berlin
- Secondary Signals: Guadalajara, Mexico (MX) - Multiple geolocation services
- Ixtapa-Zihuatanejo, Gro (MX) - via Alienvault OTX
*Note: Geographic signal inconsistency detected across multiple sources. Residential IP routing patterns may explain variations.*
---
## Threat Intelligence Assessment
Current Threat Indicators:
- Threat Indicators: None detected
- Blacklist Count: 0
- Abuse Confidence Score: Not applicable
- Known Campaigns: None
- Threat Feeds: No matches
- Pulsedive Risk: Not applicable
Campaign Correlation:
- Campaign Likelihood: Not detected
- Certificate Matches: 0
- Correlated IPs: 0
---
## Network Neighborhood Analysis
Subnet: 177.227.28.116/24
- Classification: Clean
- Abuse Density: 0
- Active Siblings: 0
- Threat Siblings: 0
- Inherited Risk: 0
No adjacent threat activity detected within immediate /24 subnet.
---
## Historical Signal Analysis
Observation Count: 16 signals over monitoring period
Key Historical Signals:
1. Geolocation: Multiple signals pointing to Cologne, DE (confidence: 0.49) and Guadalajara, MX (confidence: 0.40)
2. Network Classification: Consistently classified as residential infrastructure
3. Organization Data: ASN 13999/Mega Cable consistently identified
4. Threat Persistence: 0 days of observed malicious activity
5. Ownership Changes: 0 changes detected
Temporal Indicators:
- Threat Observation Count: 0
- Persistently Malicious: False
- Threat Persistence Days: 0
---
## Control Plane Assessment
| Metric | Value |
|---|---|
| Route Stability | Not stable |
| Operator Score | 0.1304 (Minimal) |
| DNSSEC Valid | Yes |
| Route Changes (30d) | 0 |
| BGP Origin ASN | AS13999 |
| IRR Consistency | Not evaluated |
---
## Recommended Security Actions
Current Risk Score: 0
Recommended Actions: None
The IP address presents no actionable threats requiring immediate security intervention. No firewall rules, WAF rules, or blocking recommendations are generated based on current risk profile.
---
## Intelligence Conclusion
177.227.28.116 is a legitimate residential IP endpoint with no observed malicious activity. The IP belongs to a large cable provider network (Mega Cable, S.A. de C.V.) and shows clean neighborhood metrics. Geographic signal inconsistencies are typical for residential IPs with varying geolocation sources. No blocking or monitoring action is recommended at this time.
SOC Recommendation: Monitor passively; no immediate action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Mega Cable, S.A. de C.V. |
| ASN | AS13999 |
| Network Name | 177.224.0.0 - 177.231.255.255 |
| CIDR Block | 177.224.0.0/13 |
| RIR | LACNIC |
| Country | MX |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | customer-ZIHU-CGN-28-116.megared.net.mx |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | customer-ZIHU-CGN-28-116.megared.net.mx |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS13999 |
| Network Prefix | 177.227.28.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:21:13 UTC |
| Last Seen | 2026-08-24 10:12:10 UTC |
| Profile Built | 2026-08-29 09:53:56 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 177.227.28.116
Who owns the IP address 177.227.28.116?
177.227.28.116 is registered to Mega Cable, S.A. de C.V.. The address falls within the 177.224.0.0/13 network block. Registration is held at LACNIC.
Where is 177.227.28.116 located?
Geolocation data places 177.227.28.116 in Cologne, NW, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 177.227.28.116 malicious or safe?
177.227.28.116 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 177.227.28.116?
The reverse DNS (PTR) record for 177.227.28.116 is customer-ZIHU-CGN-28-116.megared.net.mx. This hostname is not forward-confirmed, so it should be treated as a weak signal.
Is 177.227.28.116 a VPN, proxy, or data center address?
177.227.28.116 is classified as a residential network based on network ownership and behavioural analysis.