IOC Radar
IPMediumSignal 36/100

177.180.12.166

Location
BrazilBrazil
Belém, Pará
ASN
AS28573
NET Serviços de Comunicação S.A.
First Seen
Apr 16, 2026
Last Seen
Apr 23, 2026
Apr 16
First Seen
59d ago
Apr 23
Last Seen
52d ago
3
Reports
source reports
36%
Confidence
medium
Found in 3 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
36%
Signal Score
36 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryBRBrazil
RegionBelém, Pará
ASNAS28573
OrganizationNET Serviços de Comunicação S.A.

Feed Intelligence Summary

3 reports36% confidence
3
Source reports
36%
Confidence score
Category tags
bad reputationbotnet activitybrazilhttpindicatormalicious ipnetworkresearchedrobotsouth americatcp

Activity Timeline

1 total obs
Apr 23Apr 23

Threat Activity Heatmap

· Peak: 2026-04-23
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
36
SIGNAL
Signal Score
36%
Confidence
3
Reports
First seenApr 16, 2026
Last seenApr 23, 2026
GeolocationBR
CountryBrazil
LocationBelém, Pará
ASNAS28573
OrgNET Serviços de Comunicação S.A.
Coords-1.4537, -48.5078

VirusTotal

Not checked

WHOIS

description
Hitting the server with no standard accesses. Wrong URL formation in header. Deceiving robot masked in common browser. Same IP should not appear more than once in 24 hours in this list.
raw
% Copyright (c) Nic.br - Use of this data is governed by the Use and inetnum: 177.180.0.0/14 aut-num: AS28573 abuse-c: GRSVI owner: Claro NXT Telecomunicacoes Ltda ownerid: 66.970.229/0001-67 responsible: Suporte Redes country: BR owner-c: GRSVI tech-c: GRSVI inetrev: 177.180.0.0/19 nserver: ns7.virtua.com.br nsstat: 20260413 AA nslastaa: 20260413 nserver: ns8.virtua.com.br nsstat: 20260413 AA nslastaa: 20260413 created: 20120612 changed: 20220615 nic-hdl-br: GRSVI person: Grupo de Seguran�a V�rtua e-mail: [email protected] country: BR created: 20080512 changed: 20230704

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 month ago · Last seen 1 month ago
Appeared in 3 threat reports