191.185.79.91
# THREAT INTELLIGENCE BRIEFING
Target IP: 191.185.79.91/32
Date: Current Analysis
Classification: LOW RISK
---
## EXECUTIVE SUMMARY
The target IP 191.185.79.91 presents low-risk characteristics with a risk score of 25. The address is owned by Claro NXT Telecomunicacoes Ltda (ASN 28573) and classified as a mobile carrier IP with firewalled/no services. No active threat indicators detected.
---
## OWNERSHIP AND INFRASTRUCTURE
- Organization: Claro NXT Telecomunicacoes Ltda
- ASN: 28573 (Claro)
- CIDR Block: 191.184.0.0/14 (LACNIC)
- Geolocation: Brazil, Minas Gerais, Belo Horizonte
- Network Role: Mobile Carrier (Claro S.A., LTE/5G)
- Mobile Carrier: Claro (MCC: 724, MNC: 05)
---
## NETWORK CLASSIFICATION
- Risk Score: 25/100 (Low Risk)
- Abuse Confidence: Not flagged
- DNSBL Listings: 1 of 8 lists (minor)
- Services: None detected (firewalled)
- Open Ports: None
- TLS Certificate: Not present
- Forward Resolution: bfb94f5b.virtua.com.br (PTR record present)
---
## THREAT INDICATORS
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Campaign Association: None detected
- Threat Persistence: Not persistently malicious
- Threat Observation Count: 0
---
## NEIGHBORHOOD ANALYSIS
- Subnet: 191.185.79.0/24
- Abuse Density: 0
- Subnet Classification: Clean
- Total Siblings: 1
- Active Threat Siblings: 0
---
## OBSERVATION HISTORY
Fifteen historical observations recorded, most recent from 2026-07-25. Ownership remains stable with no changes detected. Multiple geolocation signal sources provide consensus data for Brazil (Minas Gerais region). No escalation in threat activity observed over the observation period.
---
## RELATIONSHIP GRAPH
- Network Associations: Multiple entries for network 216255
- DNS Associations: bfb94f5b.virtua.com.br (multiple entries)
- No Certificate Associations: None
---
## RECOMMENDED ACTIONS
No specific firewall or blocking rules recommended at this time. The IP presents minimal threat characteristics consistent with normal mobile carrier traffic. Continue standard monitoring protocols.
---
STATUS: NO IMMEDIATE ACTION REQUIRED
CONFIDENCE: Moderate (risk score 25, clean neighborhood, no active indicators)
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Claro NXT Telecomunicacoes Ltda |
| ASN | AS28573 |
| Network Name | 216255 |
| CIDR Block | 191.184.0.0/14 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | bfb94f5b.virtua.com.br |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | bfb94f5b.virtua.com.br |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS28573 |
| Network Prefix | 191.185.0.0/17 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 01:19:17 UTC |
| Last Seen | 2026-10-05 06:47:12 UTC |
| Profile Built | 2026-10-05 06:48:02 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 191.185.79.91
Who owns the IP address 191.185.79.91?
191.185.79.91 is registered to Claro NXT Telecomunicacoes Ltda. The address falls within the 191.184.0.0/14 network block. Registration is held at LACNIC.
Where is 191.185.79.91 located?
Geolocation data places 191.185.79.91 in Belo Horizonte, Minas Gerais, Brazil. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 191.185.79.91 malicious or safe?
191.185.79.91 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 191.185.79.91?
The reverse DNS (PTR) record for 191.185.79.91 is bfb94f5b.virtua.com.br. This hostname is not forward-confirmed, so it should be treated as a weak signal.
Is 191.185.79.91 a VPN, proxy, or data center address?
191.185.79.91 is classified as a mobile network and a residential network based on network ownership and behavioural analysis.