179.189.196.196📋 Copy

IP Intelligence Briefing: 179.189.196.196

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Score: 55 (Moderate Risk)
• Ownership:

- ASN: AS52626 (NovaNet Provedor e Web Ltda, Brazil)

- CIDR: 179.189.192.0/21

- Registration: Lacnic (Brazilian registry)

• Geolocation:

- City: Itaituba, Pará, Brazil

- Coordinates: Latitude -4.28, Longitude -55.98

- Timezone: Not specified

• Threat Indicators:

- No malicious indicators, spam, or known attacker activity.

- No DNSBL listings or TLS certificate anomalies.

• Network Role:

- Classified as "Firewalled / No Services" with no open ports or HTTP services detected.

---

**2. Observation History**

• Last 30 Days:

- 17 observations (June 7, 2026 – May 31, 2026).

- Key Trends:

- Stable ownership (AS52626) with no ownership changes.

- Geolocation data consistent (Brazil, Pará).

- No spikes in threat signals or network instability.

• Risk Persistence:

- No persistent malicious activity; risk score remains moderate.

---

**3. Relationships & Dependencies**

• Network Associations:

- Linked to subnet 179.189.192.0/21 (ASN 52626).

- DNS PTR record: 196.196.189.179.novanetnp.net.br.

• Domain Context:

- DNS hostnames point to net.br (Brazilian domain registry).

- No email authentication records (SPF/DKIM) detected.

• Threat Correlations:

- No known campaigns, honeypot hits, or WAF violations.

---

**4. Neighborhood Analysis**

• Subnet: 179.189.196.0/24
• Neighbor Risk Distribution:

- High Risk (≥70): 3 IPs (e.g., 179.189.196.78, 179.189.196.220)

- Medium Risk (50–69): 17 IPs

- Low Risk (≤49): 3 IPs

• Abuse Density: 13% (moderate risk within subnet).
• Notable Neighbors:

- 179.189.196.78 (risk 80), 179.189.196.220 (risk 80) – higher risk peers.

---

**5. Recommendations**

• Monitor Subnet: Track high-risk neighbors (179.189.196.78, 179.189.196.220) for potential lateral movement or shared infrastructure risks.
• DNS Verification: Confirm validity of PTR record 196.196.189.179.novanetnp.net.br to ensure no spoofing.
• Geolocation Validation: Verify if traffic to this IP aligns with expected regional activity (Brazil).
• No Immediate Action: No direct threat detected, but subnet-level monitoring is advised.

---

*End of Briefing*

*Generated via IPDebrief analysis tools (v2026.06.07)*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.