181.192.106.246
IP Intelligence Dossier
Your IP: 216.73.216.123
π€ Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 181.192.106.246
Date: 2026-06-11
---
**1. Core Profile**
- Risk Score: 55 (Moderate Risk)
- Ownership: Registered to GLOBALLIG TELECOMUNICACOES LTDA - ME (Brazilian ISP) under ASN 270636.
- Geolocation: Brazil, Paraíba, Cajazeiras (latitude -6.92, longitude -38.57).
- Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services detected).
- Threat Indicators: No malicious indicators, blacklists, or known campaigns linked.
---
**2. Historical Observations**
- Risk Trends: Minimal risk over the past 30 days, with DNSSEC validity and routing stability.
- DNSBL Listings: Listed on 3 out of 8 DNSBLs (low severity, no high-risk categories).
- Network Stability: Subnet (181.192.106.0/24) has 0.167 abuse density; IP shows no persistent malicious activity.
---
**3. Network Relationships**
- Subnet: Part of 181.192.106.0/24 (registered to same ISP).
- Neighbors:
- High-Risk Neighbor: 181.192.106.226 (risk score 80).
- Other Neighbors: 181.192.106.240β249 (risk scores 55β0).
- Subnet Abuse: 16.7% of siblings show abuse risk; monitor high-risk neighbors for potential lateral movement.
---
**4. Actionable Insights**
- No Immediate Threat: IP is not malicious, but its subnet contains higher-risk IPs.
- Recommendations:
- Monitor Neighbors: Focus on 181.192.106.226 for potentialε ³θ risks.
- Block Subnet: Consider blocking the entire 181.192.106.0/24 subnet if high-risk neighbors are confirmed malicious.
- Verify DNSSEC: Confirm DNSSEC validity for 246.106.192.181.in-addr.arpa to prevent spoofing.
---
Next Steps: Cross-reference with internal threat feeds and monitor subnet activity for emerging risks.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | GLOBALLIG TELECOMUNICACOES LTDA - ME |
| ASN | AS270636 |
| Network Name | 383386 |
| CIDR Block | 181.192.104.0/22 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | β |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User β Residential ISP endpoint |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | β |
| HTTP Title | β |
π TLS Certificate
No certificate
Issued by β
N/A
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 19% | 2 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 19% | 2 | 2 |
| Overall | 18% | 7 | 7 |
Coverage: 5/6 dimensions Β· Data sufficiency: partial
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-28 12:25:07 UTC |
| Last Seen | 2026-06-18 13:32:02 UTC |
| Profile Built | 2026-06-11 15:41:36 UTC |
| Data Freshness | Live |
| Signal Types | 14 |
| Total Observations | 14 |
π 14 signal types Β· 14 observations collected
This report is generated from 14+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
βΉοΈ About This Report
All data shown is publicly available network metadata β IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.