187.1.166.20
IP Intelligence Briefing: 187.1.166.20/32
*Generated via IPDebrief Analysis*
---
**1. Core Profile**
- Risk Score: 80 (High Risk)
- Ownership:
- ASN: 28252
- Organization: *WorldNet Telecom Comercio e Serviços de Telecomunições* (Brazil)
- Geolocation: Recife, Pernambuco, Brazil (Residential)
- Network Role: Residential endpoint (no CDN,VPN, or hosting indicators).
---
**2. Threat & Abuse Indicators**
- DNSBL Listings: 5/8 (potential spam or malicious activity risk).
- DNSSEC Validity: Confirmed (no DNSSEC issues).
- Email Security: No SPF/DKIM records detected (increased spoofing risk).
- Threat Feeds: No direct malicious indicators (no malware, phishing, or C2 activity).
---
**3. Historical Observations (Last 30 Days)**
- DNSSEC Validity: Consistent (no recent anomalies).
- Geolocation: Stable (Recife, Brazil).
- Network Stability: 0 route changes; stability score: 0.13 (minimal).
- DNS Resolution: Single PTR hostname (`static-20.166.1.187.worldnet.com.br`) with no forward resolution issues.
---
**4. Relationships & Network Context**
- Linked Entities:
- DNS association with `static-20.166.1.187.worldnet.com.br` (10x).
- Same network (`121721`) with no abuse density reported.
- Subnet: No neighboring IPs found in `/24` range.
---
**5. Behavioral & Technical Notes**
- Open Ports: None detected.
- TLS/HTTP: No certificate or server banner data.
- Traceroute: 30-hop path with transit networks (Comcast, NTT).
- Mobile/Carrier: No mobile carrier or ISP data available.
---
**6. Recommended Actions**
1. Monitor DNSBL Listings: Investigate potential spam or phishing activity.
2. Enforce Email Security: Implement SPF/DKIM for domain `worldnet.com.br`.
3. Network Segmentation: Isolate residential IPs in firewall rules to reduce exposure.
4. Geolocation Filtering: Block traffic from Brazil if non-compliant with regional regulations.
---
Conclusion: This residential IP shows no direct malicious activity but has moderate DNSBL risk. Focus on DNS security and geolocation compliance. No immediate mitigation required, but continuous monitoring is advised.
*Generated by IPDebrief – Cybersecurity Threat Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | WorldNet Telecom Comercio e Serviços de Telecomuni |
| ASN | AS28252 |
| Network Name | 121721 |
| CIDR Block | 187.1.160.0/20 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | static-20.166.1.187.worldnet.com.br |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | static-20.166.1.187.worldnet.com.br |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 19% | 2 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 12% | 6 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-27 01:07:14 UTC |
| Last Seen | 2026-06-13 15:52:32 UTC |
| Profile Built | 2026-06-11 07:46:13 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.