# 191.178.223.110 — IP Intelligence Summary

191.178.223.110 is an IPv4 address operated by AS28573 - Claro NXT Telecomunicacoes Ltda, BR (AS28573), with approximate network location Guarulhos, Brazil. It belongs to a mobile network. As of November 14, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/191.178.223.110
- Last updated: 2026-11-14

## Ownership

- Organization: Claro NXT Telecomunicacoes Ltda
- Network name: 216253
- Allocated block: 191.176.0.0/14
- ASN: AS28573 (https://ipdebrief.com/asn/28573)
- Regional registry: LACNIC
- Registered holder: Claro NXT Telecomunicacoes Ltda
- Routing operator: AS28573 - Claro NXT Telecomunicacoes Ltda, BR
- Network registration country: BR
- Registrant address country: BR

## Location

- City: Guarulhos
- Region: SP
- Country: Brazil
- Time zone: America/Sao_Paulo

Approximate network location; registration and certificate addresses are not server-location evidence.

## Network classification

- Infrastructure type: Residential
- Datacenter / hosting: no
- Residential: yes
- Mobile: yes
- Anycast: Unverified (not proof of unicast)
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (0/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https
- 3389/tcp — rdp

## DNS posture

Mail authentication and CAA are optional domain policies, not IP-wide requirements.

- caa: Not found at queried name (br)
- spf: Not checked
- dmarc: Not checked
- dnssec: Unknown / lookup inconclusive (110.223.178.191.in-addr.arpa)
- fcrDns: Not checked

## TLS observations

- CN=gestaoapps.fulltruck.net.br; port unknown; target —; Previously observed expired certificate; stale evidence; valid until 2026-11-01T12:07:31.0000000+00:00

## Witness AI - IP Assessment (AI-generated)

AI-generated assessment. Verify critical details independently.

On 2024-06-02, IP address 191.178.223.110/32 was observed resolving and reporting a valid response from the server. The host is associated with ASN 28573, operated by Claro NXT Telecomunicacoes Ltda in Brazil, and is allocated within the 191.176.0.0/14 CIDR block. Geolocation data indicates the network infrastructure is situated in Guarulhos, SP, Brazil, with a classification of residential and mobile connectivity.

Network role assessment labeled the endpoint as a web server, though no definitive hosting, CDN, proxy, VPN, or Tor exit node characteristics were confirmed. An observed TLS certificate, previously expired or stale, identified the target host as gestaoapps.fulltruck.net.br, issued by Let's Encrypt. The certificate validity period extended from August 2026 to November 2026, suggesting a future-dated or misconfigured observation artifact.

DNS hygiene checks for CAA, SPF, DMARC, and DNSSEC returned no assessed results or unknown statuses, preventing a determination of email or domain security posture. The overall risk score remained unassessed or zero based on available data. Due to the limited nature of the observations and the presence of conflicting or unverified attributes, continued monitoring is recommended to establish a baseline behavior for this residential web server.

## Addresses sharing infrastructure

- 177.181.2.178 — Same abuse contact (https://ipdebrief.com/177.181.2.178)
- 179.209.44.36 — Same abuse contact (https://ipdebrief.com/179.209.44.36)
- 179.222.232.5 — Same abuse contact (https://ipdebrief.com/179.222.232.5)
- 181.213.83.25 — Same abuse contact (https://ipdebrief.com/181.213.83.25)
- 187.38.173.30 — Same abuse contact (https://ipdebrief.com/187.38.173.30)
- 187.182.72.182 — Same abuse contact (https://ipdebrief.com/187.182.72.182)
- 187.182.75.161 — Same abuse contact (https://ipdebrief.com/187.182.75.161)
- 187.182.75.174 — Same abuse contact (https://ipdebrief.com/187.182.75.174)
- 187.183.36.57 — Same abuse contact (https://ipdebrief.com/187.183.36.57)
- 189.33.66.176 — Same abuse contact (https://ipdebrief.com/189.33.66.176)
- 189.33.67.99 — Same abuse contact (https://ipdebrief.com/189.33.67.99)
- 201.6.65.37 — Same abuse contact (https://ipdebrief.com/201.6.65.37)

---

Source: IPDebrief, "191.178.223.110 IP intelligence", https://ipdebrief.com/191.178.223.110, updated 2026-11-14. Assessments are probabilistic.