IPDebrief

189.26.112.85

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP Intelligence Briefing: 189.26.112.85

Date: 2026-06-17

---

**1. Risk Profile**

---

**2. Key Observations**

- DNSSEC validated.

- 1 DNSBL listing (out of 8 monitored lists).

- BGP prefix: `189.26.0.0/17` (subscribed to by TELEFÔNICA BRASIL S.A.).

- One low-confidence threat feed listing (June 17, 2026).

- Subnet abuse density: "mostly_clean" (abuse density: 1).

---

**3. Network Relationships**

---

**4. Recommendations**

---

Conclusion: 189.26.112.85 is a legitimate mobile IP owned by TIM S.A. (TELEFÔNICA BRASIL S.A.). No evidence of malicious activity is present, but ongoing monitoring is advised for contextual anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ง๐Ÿ‡ท Brazil
RegionParaná
CityCuritiba
Timezoneโ€”
Latitude-25.50
Longitude-49.29

๐Ÿข Ownership & Registration

OrganizationTELEFÔNICA BRASIL S.A
ASNAS18881
Network Name91117
CIDR Block189.26.0.0/15
RIRLACNIC
CountryBR
Abuse Contactโ€”

๐ŸŒ DNS Intelligence

PTRsupermix.static.gvt.net.br
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnamessupermix.static.gvt.net.br

๐Ÿ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureMobile
Service PurposeSingle-Service Host
Network TierUnknown โ€” Insufficient routing data to classify
Mobile

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
22sshtcp
Closed Ports25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_6.7

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
30%
23
routing
13%
11
services
8%
11
ownership
19%
22
reputation
24%
13
geolocation
32%
23
Overall21%913
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) โ€” 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
โš  Claimed geolocation contradicts RTT physics measurement

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-07 23:04:02 UTC
Last Seen2026-06-23 02:03:42 UTC
Profile Built2026-06-23 02:10:32 UTC
Data FreshnessLive
Signal Types21
Total Observations22
๐Ÿ” 21 signal types ยท 22 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.