IPDebrief

177.227.28.116

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# INTELLIGENCE BRIEFING: 177.227.28.116/32

Classification: Residential Endpoint | Risk Level: Low Risk | Report Date: 2026-07-22

---

## Executive Summary

IP address 177.227.28.116 is a residential endpoint associated with Mega Cable, S.A. de C.V. (AS13999) under LACNIC registry. Current risk assessment indicates low threat potential with zero abuse confidence. No active threat indicators, blacklists, or malicious campaigns detected.

---

## Infrastructure Profile

AttributeValue
**IP Address**177.227.28.116/32
**Organization**Mega Cable, S.A. de C.V.
**ASN**AS13999
**CIDR Block**177.224.0.0/13
**RIR**LACNIC
**Network Role**Residential Endpoint
**Infrastructure Type**Residential
**PTR Hostname**customer-ZIHU-CGN-28-116.megared.net.mx

---

## Geolocation Analysis

Observed Locations:

- Coordinates: 50.87°N, 7.14°E

- Accuracy: ±75 km

- Timezone: Europe/Berlin

- Ixtapa-Zihuatanejo, Gro (MX) - via Alienvault OTX

*Note: Geographic signal inconsistency detected across multiple sources. Residential IP routing patterns may explain variations.*

---

## Threat Intelligence Assessment

Current Threat Indicators:

Campaign Correlation:

---

## Network Neighborhood Analysis

Subnet: 177.227.28.116/24

No adjacent threat activity detected within immediate /24 subnet.

---

## Historical Signal Analysis

Observation Count: 16 signals over monitoring period

Key Historical Signals:

1. Geolocation: Multiple signals pointing to Cologne, DE (confidence: 0.49) and Guadalajara, MX (confidence: 0.40)

2. Network Classification: Consistently classified as residential infrastructure

3. Organization Data: ASN 13999/Mega Cable consistently identified

4. Threat Persistence: 0 days of observed malicious activity

5. Ownership Changes: 0 changes detected

Temporal Indicators:

---

## Control Plane Assessment

MetricValue
Route StabilityNot stable
Operator Score0.1304 (Minimal)
DNSSEC ValidYes
Route Changes (30d)0
BGP Origin ASNAS13999
IRR ConsistencyNot evaluated

---

## Recommended Security Actions

Current Risk Score: 0

Recommended Actions: None

The IP address presents no actionable threats requiring immediate security intervention. No firewall rules, WAF rules, or blocking recommendations are generated based on current risk profile.

---

## Intelligence Conclusion

177.227.28.116 is a legitimate residential IP endpoint with no observed malicious activity. The IP belongs to a large cable provider network (Mega Cable, S.A. de C.V.) and shows clean neighborhood metrics. Geographic signal inconsistencies are typical for residential IPs with varying geolocation sources. No blocking or monitoring action is recommended at this time.

SOC Recommendation: Monitor passively; no immediate action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇩🇪 Germany
RegionNW
CityCologne
TimezoneEurope/Berlin
Latitude50.87
Longitude7.14

🏢 Ownership & Registration

OrganizationMega Cable, S.A. de C.V.
ASNAS13999
Network Name177.224.0.0 - 177.231.255.255
CIDR Block177.224.0.0/13
RIRLACNIC
CountryMX
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRcustomer-ZIHU-CGN-28-116.megared.net.mx
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnamescustomer-ZIHU-CGN-28-116.megared.net.mx

🔐 DNS Hygiene

Hygiene Score40% (Fair)
SPFPresent
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureResidential
Service PurposeResidential Endpoint
Network TierEnd-User — Residential ISP endpoint
Residential

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🛡️ Public Network Snapshot

Origin ASNAS13999
Network Prefix177.227.28.0/22
Route mappingFound

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
11
routing
25%
11
services
25%
11
ownership
0%
00
reputation
0%
00
geolocation
0%
00
Overall12%33
Coverage: 3/6 dimensions · Data sufficiency: partial
Data CoherenceMostly Consistent (80%) — 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Geo sources disagree on country: US, DE

📅 Observation Timeline 🔄 Live

First Seen2026-07-02 04:21:13 UTC
Last Seen2026-08-24 10:12:10 UTC
Profile Built2026-08-29 09:53:56 UTC
Data FreshnessLive
Signal Types25
Total Observations28
🔍 25 signal types · 28 observations collected
This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 177.227.28.116

Who owns the IP address 177.227.28.116?

177.227.28.116 is registered to Mega Cable, S.A. de C.V.. The address falls within the 177.224.0.0/13 network block. Registration is held at LACNIC.

Where is 177.227.28.116 located?

Geolocation data places 177.227.28.116 in Cologne, NW, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 177.227.28.116 malicious or safe?

177.227.28.116 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 177.227.28.116?

The reverse DNS (PTR) record for 177.227.28.116 is customer-ZIHU-CGN-28-116.megared.net.mx. This hostname is not forward-confirmed, so it should be treated as a weak signal.

Is 177.227.28.116 a VPN, proxy, or data center address?

177.227.28.116 is classified as a residential network based on network ownership and behavioural analysis.

🏘️ Related IP Addresses

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.