179.105.129.116
# IP Intelligence Briefing: 179.105.129.116/32
Classification: Low Risk — Residential Mobile Endpoint
Report Date: 2026-07-30
Analysis Period: 16 signal observations
---
## Executive Summary
IP address 179.105.129.116 presents a low-risk profile with no observed malicious activity. The address is associated with a residential mobile endpoint operated by Claro NXT Telecomunicacoes Ltda (ASN 28573) in Ilhéus, Bahia, Brazil. The IP demonstrates clean characteristics with zero abuse density in its subnet and no blacklist entries.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 0 (Low Risk) |
| **ASN** | 28573 (Claro NXT Telecomunicacoes Ltda) |
| **Country/Region** | Brazil (BR) — Bahia |
| **City** | Ilhéus |
| **Network Block** | 179.105.0.0/16 |
| **Infrastructure Type** | Residential Endpoint |
| **Connection Type** | Mobile (LTE/5G) |
| **Mobile Carrier** | Claro S.A. (MCC: 724, MNC: 05) |
| **DNS PTR** | b3698174.virtua.com.br |
---
## Threat Assessment
Threat Indicators: None detected
- Not a Tor exit node or known attacker
- Not classified as a spam source
- Zero blacklist entries (blacklistCount: 0)
- No known campaign associations
- No persistent malicious behavior observed
Abuse Metrics:
- Abuse Confidence Score: Not applicable
- Threat Observation Count: 0
- Is Persistently Malicious: False
---
## Neighborhood Analysis (179.105.129.0/24)
| Metric | Value |
|---|---|
| **Abuse Density** | 0 (Clean) |
| **Total Siblings** | 1 |
| **Active Siblings** | 0 |
| **Threat Siblings** | 0 |
| **Risk Classification** | Clean |
The surrounding /24 subnet shows no elevated risk indicators, supporting the conclusion that this IP operates in a benign residential mobile environment.
---
## Historical Observation Summary
Sixteen signal observations recorded. Recent activity from 2026-07-30 confirms:
- Ownership stability: No changes
- Threat persistence: None
- Subnet classification: Clean (abuse density: 0)
- Infrastructure: Residential (not CDN, VPN, proxy, or hosting)
No temporal escalation in risk observed.
---
## DNS & Service Analysis
| Metric | Value |
|---|---|
| **Forward Resolution** | b3698174.virtua.com.br |
| **Forward Confirmed** | No |
| **Hosted Domains** | 0 |
| **Open Ports** | None detected |
| **TLS Certificate** | None |
| **HTTP Services** | None |
| **Email Auth** | SPF: No, DMARC: No |
The IP resolves to a Virtua domain (common Brazilian reseller/networking provider). No active web services or email authentication configured.
---
## Control Plane & Routing
- BGP Origin: 179.105.128.0/19
- Route Stability: False
- Route Changes (30d): 0
- DNSBL Listed: 0/8
- RPKI State: Not validated
- IRR Consistency: Not applicable
---
## Intelligence Recommendations
Action Priority: Monitor — No immediate action required
1. Traffic Allowance: Permitted. This is a legitimate residential mobile endpoint.
2. Firewall Rules: No specific blocking recommended.
3. Monitoring: Standard residential traffic monitoring applies. No special scrutiny warranted.
4. Block Threshold: Not met. Risk score of 0 with no threat indicators supports continued allow.
Recommended Actions: None. The IP profile indicates benign residential mobile usage.
---
## Related Entities
- Network: 230240 (Claro NXT Telecomunicacoes Ltda)
- DNS Hostname: b3698174.virtua.com.br (repeated across 4 relationship entries)
---
Conclusion: IP 179.105.129.116 is a clean residential mobile endpoint with no malicious indicators. SOC teams may permit traffic while maintaining standard residential endpoint monitoring protocols.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Claro NXT Telecomunicacoes Ltda |
| ASN | AS28573 |
| Network Name | 230240 |
| CIDR Block | 179.105.0.0/16 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | b3698174.virtua.com.br |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | b3698174.virtua.com.br |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-24 20:33:50 UTC |
| Last Seen | 2026-07-30 00:55:31 UTC |
| Profile Built | 2026-07-30 01:05:57 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.