186.120.227.146📋 Copy

# IP Intelligence Briefing: 186.120.227.146

Classification: Moderate Risk (Score: 65/100)

Date: Current

Source: IPDebrief Intelligence Platform

## Executive Summary

IP 186.120.227.146 is a fixed infrastructure address belonging to ALTICE DOMINICANA S.A. (ASN 28118), hosted in Santo Domingo Este, Dominican Republic. The IP carries an elevated risk score of 65/100 with no active threat indicators. The address is firewalled with no open services, but shows DNSBL listings (3/8 lists) and unstable route propagation. Recommended action: monitor and review activity before applying blocking controls.

## Technical Profile

## Network Behavior

• Service Status: Firewalled / No Services (no open ports, no TLS certificates, no HTTP banners)
• Network Classification: Not cloud, CDN, VPN, proxy, Tor, hosting, mobile, or residential
• Route Stability: Unstable (route changes detected)
• BGP Prefix: 186.120.224.0/22
• Traceroute: 29 hops, 19 timed out, last hop RTT 75.9ms via Comcast

## Threat Indicators

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Abuse Confidence: Not applicable
• Blacklist Count: 0 (source-based)
• DNSBL Listed: 3 lists
• Threat Persistence Days: 0
• Campaign Correlation: 0 correlated IPs, 0 certificate matches

## Neighborhood Analysis

• Subnet: 186.120.227.146/24
• Abuse Density: 0
• Threat Siblings: 0
• Active Siblings: 0
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 0

The IP has no sibling neighbors in the immediate /24 subnet showing abuse activity.

## Observation History

Thirteen observations recorded over the monitoring period. Recent signals indicate:

• Subnet classified as "clean" with no inherited risk
• Organization consistently resolved as ALTICE DOMINICANA S.A.
• RIR: LACNIC
• No ownership changes detected
• No persistent malicious activity flags

## Security Recommendations

Immediate Actions

1. Increase Logging Verbosity: Review recent activity from this IP (High Severity)

2. Firewall Rule Consideration: Block or rate-limit based on organizational policy

Suggested Rules

• iptables: `iptables -A INPUT -s 186.120.227.146 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 186.120.227.146 drop`
• nginx: `deny 186.120.227.146;`
• pfSense: `186.120.227.146/32`
• Cloudflare WAF: Block expression: `ip.src eq 186.120.227.146`
• AWS WAF: Add IPSet entry for 186.120.227.146/32

## Contextual Notes

• Abuse contact available via RDAP: transportplanning@altice.com.do
• No email reputation data (no hosted domains, no SPF/DMARC)
• No PTR hostnames resolved
• Geovalidation shows plausible location with single-source validation
• Control plane shows route instability but no IRR/RR consistency issues

Analyst Decision: Monitor activity patterns for 24-48 hours. If no legitimate business activity confirmed, apply blocking rules. The elevated risk score (65/100) warrants caution despite the absence of known threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.