The IP address 179.125.91.136 was associated with Pombonet Telecomunicações e Informática (ASN 262988) and classified as a residential endpoint located in Jundiaí, São Paulo, Brazil. Observations recorded from 2026-07-11 to 2026-09-04 indicated a moderate risk profile with a risk score of 40. While the address was not flagged as a known attacker or Tor exit node, it appeared on two DNSBLs and exhibited a DNS hygiene score of 40 due to missing SPF and DMARC records. Neighborhood analysis of the 179.125.91.136/24 subnet identified one threat sibling and a low overall abuse density. A contradiction was noted between the claimed geolocation and RTT physics measurements. Due to the moderate risk classification and DNSBL presence, analysts were advised to consider rate-limiting traffic from this address.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Pombonet Telecomunicações e Informática |
| ASN | AS262988 |
| Network Name | 212709 |
| CIDR Block | 179.125.64.0/19 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | 179-125-91-136-dinamico.pombonet.net.br |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 179-125-91-136-dinamico.pombonet.net.br |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS262988 |
| Network Prefix | 179.125.64.0/19 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 23% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 25% | 2 | 3 |
| reputation | 20% | 1 | 3 |
| geolocation | 17% | 2 | 3 |
| Overall | 17% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 02:18:05 UTC |
| Last Seen | 2026-09-04 22:42:23 UTC |
| Profile Built | 2026-09-04 22:53:14 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 29 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 179.125.91.136
Who owns the IP address 179.125.91.136?
179.125.91.136 is registered to Pombonet Telecomunicações e Informática. The address falls within the 179.125.64.0/19 network block. Registration is held at LACNIC.
Where is 179.125.91.136 located?
Geolocation data places 179.125.91.136 in Jundiaí, São Paulo, Brazil. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 179.125.91.136 malicious or safe?
179.125.91.136 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 179.125.91.136?
The reverse DNS (PTR) record for 179.125.91.136 is 179-125-91-136-dinamico.pombonet.net.br. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 179.125.91.136 a VPN, proxy, or data center address?
179.125.91.136 is classified as a residential network based on network ownership and behavioural analysis.