Summary

  • The BTW directory entry WEVERTON CORREIA GUEDES - ME reproduces a NIC.br contact-handle person string, not the corporate form of the operator behind AS266481, which the commercial record describes as Netribas Telecomunicacoes LTDA, a micro-enterprise.
  • The registry layer establishes a created date of 2017-01-11, a registered owner with CNPJ 15.440.016/0001-92, an IPv4 allocation of 1,024 addresses and an IPv6 /32, with an IRR object last modified 2025-05-21.
  • Third-party BGP observers disagree on the currently originated prefix count (2 to 7) and peer count (36 to roughly 80); PeeringDB's self-reported 50 IPv4 prefixes is inconsistent with all of them.
  • The identity of the upstream behind AS53062 is unresolved: two aggregators name different companies.
  • A crowdsourced speed ranking lists Net Ribas third among ISPs in Ribas do Rio Pardo at 114.01 Mbps — the only evidence of retail activity, and the weakest.

The first thing the public record offers about AS266481 is a name that does not belong to a company at all. The handle WCGME5 in the NIC.br registration carries the person string "WEVERTON CORREIA GUEDES - ME", which also embeds the contact's CPF digits (a personal identifier withheld from reproduction here), and it is this string that the directory card https://btw.media/en/directory/weverton-correia-guedes-me preserves as the entity's name. In Brazilian corporate law, "- ME" designates a micro-empresa — a micro-enterprise classification — yet the registry field that matters commercially, the ownerid on the autonomous-system object, is not a person at all. It is CNPJ 15.440.016/0001-92, registered under the name NET RIBAS TELECOMUNICACOES with Weverton Correia Guedes as the responsible individual. The mirrored whois block reproduced by [https://www.cidr-report.org/cgi-bin/as-report?as=AS266481&v=4&view=2.0] records exactly that: owner NET RIBAS TELECOMUNICACOES, ownerid 15.440.016/0001-92, created 2017-01-11, with registered address space 170.83.88.0/22 and 2804:387c::/32.

That distinction — a contact handle versus an operating corporate form — is not pedantry. It determines which evidence speaks to what. The handle layer tells us who the registry contact is; the CNPJ layer tells us who owns the network; the BGP layer tells us what is being announced; the peering and measurement layers tell us, at best, how the network connects and serves. Collapsing them produces exactly the confusion the directory card now carries, and a reader who treats "WEVERTON CORREIA GUEDES - ME" as the operator's legal name would be wrong in both direction and corporate form.

The corporate record, as reported by the aggregator [https://www.cirtrox.com.br/consulta-empresas/empresa/15440016000192-netribas-telecomunicacoes], fills in the operating entity: Netribas Telecomunicacoes LTDA, a sociedade empresária limitada classified as a microempresa, headquartered at Avenida Aureliano Moura Brandão, 1279, Jardim Vista Alegre, in Ribas do Rio Pardo, Mato Grosso do Sul, CEP 79182-004. The aggregator reports the company was constituted in April 2012 (stated start 27 April 2012), with declared capital of R$300,000, opted into Simples Nacional, and listed as active, with primary CNAE 6110803 — multimedia communication services (SCM) — and secondary activities including STFC telephony, access provision, network construction, IT support and telecom retail. Weverton Correia Guedes is listed as sócio-administrador since 13 November 2025. This is an unofficial aggregation of Receita Federal data, not the official record itself; no Receita Federal document was inspected for this article, and every corporate figure here is reported-only.

The resource layer is the most solidly corroborated part of the story, because it is the part multiple independent aggregators reproduce from the same registry data. The IPv4 allocation of 170.83.88.0/22 — 1,024 addresses, of which 170.83.89.0/24 alone accounts for 256 — and the IPv6 allocation 2804:387c::/32 appear consistently across [https://whois.ipip.net/AS266481], [https://ipregistry.co/AS266481] and [https://www.cidr-report.org/cgi-bin/as-report?as=AS266481&v=4&view=2.0], with a LACNIC allocation date of 11 January 2017 repeated by [https://ipgeolocation.io/browse/asn/AS266481] and [https://ipregistry.co/AS266481]. One address inside the block, 170.83.88.115, geolocates to Ribas do Rio Pardo with a PTR record in the operator's own domain, netribas.net.br, according to [https://ipinfo.io/170.83.88.115] — a consistency between geography, naming and infrastructure that a purely dormant registry artifact would be unlikely to produce.

Connectivity is where the evidence grade drops from registry fact to observational snapshot. The IRR object mirrored by [https://bgp.he.net/AS266481], last modified 2025-05-21, records an as-name of NETRIBAS importing from AS61588 and AS53062 and exporting AS266481:AS-NETRIBAS to both, with a 24x7 routing/security contact listed. Two IX sessions are listed: IX.br (PTT.br) Campo Grande at 1 Gbps, last updated 2020-09-11, and IX.br (PTT.br) São Paulo at 10 Gbps, updated 2025-05-21 — the same two sessions, with identical port capacities and dates, appear in [https://whois.ipip.net/AS266481]. A 10 Gbps port at one of the world's largest exchange points, paired with a long-standing 1 Gbps regional port, is a coherent physical footprint for a small eyeball network: local aggregation in the state capital, plus a larger pipe to the São Paulo market.

The prefixes actually announced are where the sources disagree most sharply, and the disagreement is itself informative. [https://www.cidr-report.org/cgi-bin/as-report?as=AS266481&v=4&view=2.0] reports roughly 1,280 addresses (a /21.68 equivalent) across two currently announced prefixes; [https://bgp.he.net/AS266481] lists 7 originated prefixes (4 IPv4, 3 IPv6); [https://bgp.tools/as/266481] and [https://ipgeolocation.io/browse/asn/AS266481] each report 3 IPv4 routes (listing 170.83.88.0/23, /22 and, in the latter's case, 170.83.90.0/23) plus 2804:387c::/32. None of these is a registry fact; all are BGP snapshots at different moments, and prefix announcements fluctuate with routing policy and session state. The honest reading is a range: between two and seven visible prefixes over the observed period, all inside the allocated /22 and the allocated /32. Against this, PeeringDB's self-maintained record for the network [https://www.peeringdb.com/net/19689] lists 50 IPv4 and 10 IPv6 prefixes — a self-reported figure that no BGP observer corroborates and that most plausibly reflects an outdated or aspirational entry.

PeeringDB is nonetheless useful for what it is: the operator's own self-description of its business. The record [https://www.peeringdb.com/net/19689] classifies AS266481 as Cable/DSL/ISP with regional scope, traffic of 5–10 Gbps mostly inbound, a website at netribas.net.br, a looking glass and a route server, and RIR status ok. The self-description reads: "Provider of Internet access in various City of state Mato Grosso do Sul in Brazil" — grammatically imperfect but unambiguous in substance. Inbound-heavy traffic ratios and an eyeball classification are consistent with a residential access provider whose customers consume far more than they originate.

Peer counts show the same snapshot volatility. [https://ipinfo.io/AS266481] reports 36 peers and the two upstreams AS53062 and AS61588; [https://bgp.he.net/AS266481] reports roughly 80 (63 IPv4, 65 IPv6). The number of BGP adjacencies a network of this size carries depends heavily on session granularity at the IX, and neither figure is a contract. More consequential is the unresolved identity of one upstream: [https://www.cidr-report.org/cgi-bin/as-report?as=AS266481&v=4&view=2.0] names AS53062 as ALT | GRUPO BRASIL TECPAR, while [https://ipinfo.io/AS266481] names it GGNET TELECOMUNICACOES LTDA. Both cannot be the current operator of AS53062 in the relevant sense, and this run was unable to resolve the question; the discrepancy stands as a named contradiction rather than being settled by either source.

The retail layer is the thinnest but most decision-relevant strand. The crowdsourced ranking at [https://www.minhaconexao.com.br/ranking/ms/ribas-do-rio-pardo] lists Net Ribas third among ISPs serving Ribas do Rio Pardo, with an average measured speed of 114.01 Mbps, behind Link Net Telecom (180.65 Mbps) and Fibra Plus (135.97 Mbps). The methodology and sample size are undisclosed, and the brand name maps to the consumer service rather than the ASN holder; but its presence — alongside the geolocated customer address and the operator-maintained website and looking glass — tips the balance of evidence decisively toward an actively serving retail operator rather than a dormant registry artifact. Passive-DNS data reported by [https://ipinfo.io/AS266481] shows zero hosted domains, which is expected for an access network and says nothing about retail activity either way.

What does the whole record establish, then, and what does it not? It establishes: a registered, active, LACNIC-allocated autonomous system created in 2017 under NIC.br; an operating LTDA micro-enterprise in a single municipality in Mato Grosso do Sul, active since 2012; two exchange ports including a 10 Gbps São Paulo session updated in 2025; a modest and fluctuating set of originated prefixes; two upstream contracts; and continued retail visibility in its home municipality. It does not establish: the market share of that service, the identity of the second upstream, the true prefix count, the accuracy of the self-reported traffic figures, or anything about revenue, customers or capex. The CNPJ aggregator [https://www.cirtrox.com.br/consulta-empresas/empresa/15440016000192-netribas-telecomunicacoes] is unofficial; the speed ranking [https://www.minhaconexao.com.br/ranking/ms/ribas-do-rio-pardo] is crowdsourced with undisclosed methodology; direct retrieval of the LACNIC RDAP object through [https://rdap.org/autnum/266481] failed because the service is a client-side tool, leaving the whois fields corroborated only through mirrors such as [https://whois.ipip.net/AS266481] and the ASN databases at [https://iamroot.tech/asndatabase/?search=AS266481] and [https://ipregistry.co/AS266481].

For the market-structure reader, the economics are legible even at this evidence grade. A micro-empresa with declared capital of R$300,000 holding a /22 and a /32, a 10 Gbps IX port and two upstream contracts is a textbook Brazilian interior-state ISP: tiny in address terms, real in service terms, and dependent on a small number of upstream contracts whose pricing and reliability it does not control. The measurable gap between Net Ribas (114.01 Mbps average, per the crowdsourced ranking) and its local leaders (180.65 and 135.97 Mbps) is a snapshot of competitive position in one municipality — indicative, not probative.

What would change the picture: corroboration of the corporate record at Receita Federal, resolution of AS53062's operator, a stable multi-month prefix count, or any published subscriber figure. Until then, the capped conclusion is the one the record supports: a registered, exchange-connected, retail-serving regional operator of micro-enterprise scale, observed entirely through mirrors, aggregators and self-reports.