177.99.193.135
IP Intelligence Dossier
Your IP: 216.73.216.123
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 177.99.193.135
Date: 2026-06-17
---
**1. Core Profile**
- Risk Score: 80 (High Risk)
- Owner: TELEFONICA BRASIL S.A (ASN 18881, Brazil)
- Geolocation: Juiz de Fora, Minas Gerais, Brazil (Geo validation failed due to RTT inconsistency).
- Network Role: Mobile (TIM carrier, LTE/5G).
- Services: SSH (port 22, OpenSSH 6.7).
---
**2. Threat Indicators**
- DNSBL Listings: 6/8 DNSBL entries (potential spam or abuse).
- Geo Spoofing: RTT (152ms) inconsistent with 9,563km distance (minimum possible RTT: 191ms).
- No Direct Malicious Activity: No indicators of malware, campaigns, or known attackers.
---
**3. Network Relationships**
- DNS Associations: Linked to `promosystem.static.gvt.net.br` (likely a legitimate domain).
- Subnet: Part of `177.99.192.0/21` (TELEFONICA BRASIL S.A).
- Neighbor Subnet: `177.99.193.135/24` (abuse density: 0, no active neighbors).
---
**4. Historical Observations**
- Recent Signals (2026-06-17):
- DNS geolocation inferred for Brazil (low confidence).
- SSH service detected (no banners or vulnerabilities).
- DNSBL listings confirmed (6/8).
- No Persistent Threats: Threat persistence days = 0; no repeated malicious activity.
---
**5. Recommendations**
- Monitor Traffic: Watch for anomalies in SSH traffic or DNS queries to `promosystem.static.gvt.net.br`.
- Block DNSBL IPs: Consider blocking IPs from the same DNSBL lists to mitigate potential spam.
- Verify Geolocation: Investigate the geo spoofing discrepancy to confirm if the IP is compromised or misconfigured.
- Network Segmentation: Isolate mobile traffic to prevent lateral movement if compromised.
Note: While the IP is flagged as high risk, there is no direct evidence of active exploitation. Focus on mitigating spoofed geolocation and DNSBL associations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | TELEFÔNICA BRASIL S.A |
| ASN | AS18881 |
| Network Name | 171908 |
| CIDR Block | 177.96.0.0/14 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | promosystem.static.gvt.net.br |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | promosystem.static.gvt.net.br |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_6.7 |
🔐 TLS Certificate
No certificate
Issued by —
N/A
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 21% | 1 | 2 |
| services | 15% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 24% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 24% | 10 | 16 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Claimed geolocation contradicts RTT physics measurement
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:03:56 UTC |
| Last Seen | 2026-06-26 18:10:49 UTC |
| Profile Built | 2026-06-22 22:28:16 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
🔍 21 signal types · 22 observations collected
This report is generated from 21+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.