186.38.24.105
Intelligence Briefing: 186.38.24.105
The IP address 186.38.24.105 was observed with a Low Risk reputation and a risk score of 25. Ownership data linked the address to ASN 22927, operated by Telefonica de Argentina, within the 186.38.0.0/16 block. Geolocation analysis presented conflicting signals, with one source identifying the location as New York, US, while DNS and TLS certificate indicators pointed to Argentina.
Network configuration showed the address resolving to 186-38-24-105.mrse.com.ar via a PTR record. The server responded on ports 80 and 443, reporting a server banner of openresty/1.13.6.2. A TLS certificate was issued by noc@wispro.co for the domain *.wisprodns.co, indicating a Mendoza, AR origin. Threat analysis indicated no known attacker status, no Tor exit node activity, and zero observed incidents or WAF violations. Control plane data noted a single DNSBL listing.
The profile indicated a Very Low confidence score of 0.25 overall. The system flagged signal contradictions regarding geographic location and geolocation consensus. The recommendation was to Monitor the IP due to present signal contradictions and a low severity rating.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Telefonica de Argentina |
| ASN | AS22927 |
| Network Name | 186.38.0.0 - 186.38.255.255 |
| CIDR Block | 186.38.0.0/16 |
| RIR | LACNIC |
| Country | AR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 186-38-24-105.mrse.com.ar |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 186-38-24-105.mrse.com.ar |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | openresty/1.13.6.2 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2018-03-01T15:00:05+00:00 |
| Valid Until | 2028-02-27T15:00:05+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 3650 days |
| Serial Number | 00E266F6083D84A28D |
| Thumbprint | AF09710990F85E7F530069F2161A208A91BA71D7 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 25% | 6 | 7 |
| Data Coherence | Contradictory (48%) — 3 contradiction(s) |
| Attribution | Very Low (20%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: AR, US
⚠ TLS certificate claims AR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-16 14:23:39 UTC |
| Last Seen | 2026-09-16 14:23:39 UTC |
| Profile Built | 2026-09-16 14:35:24 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.