177.93.213.57📋 Copy

IP Intelligence Briefing: 177.93.213.57

Date: 2026-06-12

---

**1. Core Profile**

• Risk Score: 55 (Moderate Risk)
• Ownership:

- ASN: 53075 (Holistica Provedor Internet Ltda, Brazil)

- CIDR Block: 177.93.192.0/19

• Geolocation:

- Country: US (New York)

- ASN Registry: LACNIC (Brazil)

- Conflict: Geolocation claims US but ASN is Brazilian. Potential spoofing or misattribution.

• Threat Indicators:

- Listed on 3/8 DNSBLs (blacklists).

- No active malware campaigns or known attacker associations.

---

**2. Network Behavior**

• Services:

- No open ports or TLS services detected.

- Firewalled / No Services (network role).

• BGP/Route Stability:

- BGP Prefix: 177.93.208.0/21

- Route Stability: Unstable (route changes in last 30 days).

- RPKI State: Not validated.

• DNS:

- DNSSEC Valid: Yes.

- PTR Records: Missing.

- Domain Resolution: No confirmed PTR or domain associations.

---

**3. Observation History**

• Recent Activity (Last 30 Days):

- 11 observations, including DNSBL listings, network metadata, and geolocation probes.

- High-Severity Signals: 0 (no active threats).

- DNSBL Listings: 3/8 (e.g., Spamhaus, OpenBL, etc.).

- Geolocation Discrepancy: Multiple probes flagged as "plausible" but inconsistent with ASN origin.

---

**4. Relationships & Subnet**

• Network Affiliation:

- Subnet: 177.93.192.0/19 (CIDR Block).

- Linked to AS53075 (Holistica Provedor Internet Ltda).

• Neighbor Analysis:

- No Neighbors Found in /24 subnet (177.93.213.0/24).

- Subnet abuse density: 0% (no malicious activity detected in sibling IPs).

---

**5. Recommended Actions**

1. Verify Geolocation Discrepancy: Investigate why the IP claims US location despite Brazilian ASN.

2. Monitor DNSBL Listings: Confirm if the IP is flagged for spam or abuse (e.g., Spamhaus, OpenBL).

3. Check ISP Reputation: Assess Holistica Provedor Internet Ltda’s trustworthiness and network security practices.

4. Block DNSBL Listings: Add to firewall rules (e.g., iptables, Cloudflare WAF) to mitigate potential spam or abuse.

5. Monitor Route Stability: Track BGP changes for 177.93.208.0/21 to detect network misconfigurations.

---

Conclusion:

The IP exhibits mixed data—moderate risk score, DNSBL listings, and geolocation conflicts. While no active threats are detected, the DNSBL flags and geolocation inconsistency warrant further investigation. SOC teams should prioritize monitoring DNSBL status and validating the IP’s origin to mitigate potential spoofing or abuse.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.