186.15.29.235📋 Copy

# IP Intelligence Briefing: 186.15.29.235/32

Classification: Residential Endpoint | Risk Assessment: Low Risk (Score: 15) | Status: No Active Threat Indicators

---

## Executive Summary

IP 186.15.29.235 is a residential endpoint assigned to Cable Tica (ASN 52228) in San José, Costa Rica. The address demonstrates minimal threat activity with no known malicious campaigns, blacklist listings, or attack correlations. Network classification confirms residential infrastructure with stable ownership.

---

## Network Profile

Ownership & Classification:

• ISP: Cable Tica (Cable Tica)
• ASN: 52228
• CIDR Block: 186.15.0.0/18 (186.15.0.0 - 186.15.63.255)
• RIR: LACNIC
• Network Role: Residential Endpoint
• Infrastructure Type: Residential

Geolocation:

• Country: Costa Rica (CR)
• City: San José
• Coordinates: 9.93°N, -84.07°W
• Region: Provincia de San José

DNS Resolution:

• PTR Hostname: ip235-29-15-186.ct.co.cr
• Forward Resolution: Confirmed
• Hosted Domains: None detected
• Email Authentication: SPF/DMARC not configured

---

## Threat Intelligence

Current Risk Indicators:

• Risk Score: 15/100 (Low Risk)
• Abuse Confidence Score: Not elevated
• Blacklist Count: 0
• Known Campaigns: None identified
• Threat Feeds: No indicators

Control Plane:

• Operator Score: 0.2609 (Basic)
• Route Stability: Unstable (isRouteStable: false)
• BGP Prefix: 186.15.28.0/22
• DNSSEC: Valid
• DNSBL Listings: 1 of 8 lists

Network Behavior:

• Open Ports: None detected
• TLS/Certificates: None
• HTTP Services: None
• Tor/VPN/Proxy: Not detected
• Cloud/Hosting: Not detected

---

## Neighborhood Analysis

Subnet Assessment (186.15.29.0/24):

• Abuse Density: 0.0 (Clean)
• Threat Siblings: 0
• Active Siblings: 0
• Classification: Clean
• Inherited Risk: 0

No neighboring IPs flagged for abuse activity. Subnet demonstrates residential characteristics with no concentrated threat activity.

---

## Observation History

Historical Signals (17 observations):

• Most Recent: 2026-07-28
• Ownership Changes: 0 (Stable)
• Threat Persistence Days: 0
• Is Persistently Malicious: False
• Geolocation Consensus: Validated

Key Observations:

• Consistent residential classification across all observations
• Stable organizational assignment to Cable Tica
• No escalation in threat indicators over time
• Geo-validation discrepancies noted (geo_plausible: false in control plane vs. true in geo validation)

---

## Relationship Graph

Associated Entities:

• DNS Associations: ip235-29-15-186.ct.co.cr (multiple)
• Network: 186.15.0.0 - 186.15.63.255
• No malicious relationships detected with other entities

No evidence of command-and-control infrastructure, certificate associations, or related malicious infrastructure.

---

## Recommended Actions

Current Status: No immediate action required

Monitoring Recommendations:

• Monitor for changes in DNSBL listings (currently 1 of 8 lists)
• Track route stability changes (currently unstable)
• Continue observation for any emergence of open ports or service banners

Firewall Rules: Not recommended at this time based on low-risk classification and lack of actionable threat indicators.

---

Analyst Notes: This IP represents standard residential infrastructure from a legitimate ISP. The single DNSBL listing warrants periodic review but does not indicate immediate threat. No blocking recommended without additional corroborating signals.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.