189.33.64.113📋 Copy

# IP Intelligence Briefing: 189.33.64.113/32

## Executive Summary

IP 189.33.64.113 is a residential endpoint associated with Claro NXT Telecomunicacoes Ltda in São Paulo, Brazil. The IP exhibits low-risk characteristics with no observed malicious indicators, threat activity, or reputation issues. This is a legitimate residential connection on Claro's mobile network infrastructure.

## Network Classification

• Network Role: Residential Endpoint
• Infrastructure Type: Residential
• Connection Type: Mobile (LTE/5G)
• Carrier: Claro S.A. (Claro NXT)
• ASN: 28573
• CIDR Block: 189.32.0.0/14 (92793)
• RIR: LACNIC (Brazil)
• Geolocation: São Paulo, Brazil (-23.55° latitude, -46.64° longitude)

## Risk Assessment

• Overall Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Not applicable (no abuse activity detected)
• Blacklist Count: 0
• Threat Indicators: None
• Known Campaigns: None
• Persistence: No persistent malicious activity observed

Provider/Authority Scores: Both 0, indicating no provider-level reputation concerns.

Operator Score: 0.1304 (Minimal operator label)

## Security Posture

• Tor/Proxy: Not a Tor exit node, proxy, or VPN
• Hosting: Not a hosting provider or CDN
• Bogon: Not a bogon address
• Mobile: Confirmed mobile device (Claro LTE/5G)
• Anycast: Not anycast
• DNSSEC: Valid

DNS Configuration:

• PTR Record: bd214071.virtua.com.br
• Forward Resolution: bd214071.virtua.com.br
• Forward Confirmed: Yes
• No email authentication records (SPF/DMARC not applicable for residential)

## Network Neighborhood Analysis

• Subnet: 189.33.64.0/24
• Abuse Density: 0 (no abuse activity in subnet)
• Neighbor Count: 0
• Risk Distribution: 0 high, 0 medium, 0 low risk IPs
• Threat Siblings: 0

The /24 subnet shows no malicious activity or abuse patterns.

## Historical Analysis (12 Observations)

Observation history from 2026-07-25 shows consistent classification:

• Geolocation: Consistently São Paulo, Brazil across all probes
• Network Type: Consistently classified as residential
• Threat Signals: No threat indicators observed
• Routing: Stable with minimal operator score variations
• Ownership: No ownership changes detected

Temporal Indicators:

• Threat Observation Count: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: False
• Ownership Changes: 0

## Related Entities

DNS Associations:

• bd214071.virtua.com.br (appears in reverse DNS)

Network Associations:

• Network 92793 (Claro NXT Telecomunicacoes Ltda)

## Recommended Actions

Based on the low-risk profile and residential mobile endpoint classification:

1. No Blocking Recommended: This IP shows no malicious indicators

2. Monitor: Standard residential traffic patterns expected

3. Classification: Mark as residential/mobile endpoint for traffic classification purposes

4. No Firewall Rules Required: No actionable blocks or rate limits needed

## Intelligence Conclusion

IP 189.33.64.113 represents a legitimate residential mobile endpoint from Claro's infrastructure in São Paulo. The IP exhibits clean security posture with no threat indicators, zero blacklist presence, and consistent residential classification. No security actions or blocks are warranted at this time. Standard residential traffic monitoring applies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.