186.179.192.195📋 Copy

# IP Intelligence Briefing: 186.179.192.195/32

Classification: Moderate Risk (Score: 40/100) | Status: Active Monitoring | Date: 2026-07-26

---

## Executive Summary

IP 186.179.192.195 is assigned to Telecommunicationcompany Suriname (TeleSur, ASN 27775) within the 186.179.128.0/17 block registered with LACNIC. The IP presents moderate risk with geolocation discrepancies, DNSBL listings, and no active services. No evidence of persistent malicious activity or known threat campaigns.

---

## Ownership & Registration

---

## Geolocation Analysis

Claimed Location: Suriname (Paramaribo) - Lat: 5.8667, Lon: -55.1642

Detected Location: US - Virginia (Ashburn)

Validation Status: ⚠️ VIOLATION - ICMP blocked, unable to validate

Distance Discrepancy: 7,608.8 km between claimed and detected coordinates

Rationale: Geo validation failure with significant coordinate mismatch indicates potential spoofing or misconfiguration. The IP appears in US infrastructure (Comcast transit) despite Suriname registration.

---

## Threat Indicators

---

## Network Services & Behavior

• Open Ports: None detected (Firewalled / No Services)
• TLS/HTTP: No certificates or service banners
• DNS Records: No PTR, no forward resolution
• Email Auth: No SPF/DMARC records
• Network Role: Residential/Provider classification not confirmed
• Route Stability: Unstable (isRouteStable: false)

---

## Historical Observations

Total Signals: 14 observations recorded

Recent Activity: Most recent signals from 2026-07-26

Key Historical Findings:

• Consistent ASN/network ownership to TeleSur
• No ownership changes detected
• Zero persistent threat observations
• Geolocation signals show Suriname with validation violations

---

## Subnet Neighborhood Analysis (186.179.192.0/24)

High-Risk Neighbors: 186.179.192.75 (55), 186.179.192.155 (55)

Medium-Risk Neighbors: 186.179.192.22, .46, .63 (all score 40)

Low-Risk Neighbor: 186.179.192.201 (score 0)

---

## Control Plane Data

• BGP Prefix: 186.179.192.0/24
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not Available
• IRR Consistency: Not Available
• Route Changes (30d): 0
• MoAS: No
• DNSSEC: Valid

---

## Recommended Actions

Immediate:

1. Monitor for service openings on this IP

2. Block outbound connections if not authorized

3. Flag for manual review due to geolocation discrepancy

Firewall Rules (Recommended):

```

# Block traffic from this IP (moderate risk)

iptables -A INPUT -s 186.179.192.195/32 -j DROP

```

Monitoring:

• Watch for DNSBL updates (currently listed on 2 of 8 lists)
• Monitor for service port openings
• Track geolocation consistency

---

## Intelligence Assessment

This IP presents moderate risk primarily due to geolocation validation failure and DNSBL listings. The significant distance discrepancy between claimed (Suriname) and detected (US-VA) locations warrants investigation. No active services or open ports suggest this may be a dormant or residential assignment. The subnet shows mixed risk levels with two high-risk neighbors, suggesting potential for related activity. Recommend continued monitoring and consider blocking unless legitimate use case exists.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.