# IP Intelligence Briefing: 186.45.131.193
## Executive Summary
IP address 186.45.131.193 is classified as Moderate Risk (Score: 55/100) and is associated with Telecommunication Services of Trinidad and Tobago (ASN 5639). The IP is geolocated to Arima, Trinidad and Tobago (TT) with no open services detected. Current evidence indicates residential network classification with elevated risk scoring driven by DNSBL listings and neighborhood abuse density.
---
## Technical Profile
Ownership & Classification
| Attribute | Value |
|---|---|
| ASN | 5639 |
| Organization | Telecommunication Services of Trinidad and Tobago |
| CIDR Block | 186.45.128.0/21 |
| RIR | LACNIC |
| Network Role | Firewalled / No Services |
| Infrastructure Type | Residential |
Geolocation
| Attribute | Value |
|---|---|
| Country | Trinidad and Tobago (TT) |
| Region | Borough of Arima |
| City | Arima |
| Coordinates | 10.64°N, -61.28°W |
| GeoValidation | ICMP blocked - unable to validate |
Network & DNS
| Attribute | Value |
|---|---|
| PTR Hostname | 186-45-131-193.dynamic.tstt.net.tt |
| Forward Resolution | Confirmed |
| DNS Domain | net.tt |
| Open Ports | None detected |
| TLS Certificate | None |
| HTTP Services | None |
| DNSBL Listed | 3/8 lists |
---
## Threat Assessment
Risk Indicators
- Risk Score: 55/100 (Moderate)
- Abuse Confidence Score: Not available
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Known Campaigns: None identified
Control Plane Data
| Attribute | Value |
|---|---|
| Operator Score | 0.2609 (Basic) |
| Route Stability | Not stable |
| RPKI State | Not determined |
| DNSSEC Valid | Yes |
---
## Observation History
Signal history indicates 18 total observations over the monitoring period:
- June 26, 2026: Classified as residential infrastructure with confidence 0.40
- June 5, 2026: Multiple signals recorded including ICMP probes (blocked), operator score assessment, and overall profile coverage (6/6 dimensions)
- Temporal Trends: No persistent malicious activity detected. Ownership changes: 0. Threat observation count: 0.
---
## Relationship Analysis
DNS Associations
- Primary hostname: 186-45-131-193.dynamic.tstt.net.tt
- Multiple DNS associations detected to the same PTR record
Network Relationships
- Same Network: 186.44.0.0 - 186.45.255.255 (multiple entries)
---
## Neighborhood Analysis
| Attribute | Value |
|---|---|
| Subnet | 186.45.131.193/24 |
| Abuse Density | 0.5 (50%) |
| Classification | mostly_clean |
| Total Siblings | 2 |
| Active Siblings | 0 |
| Threat Siblings | 1 |
Neighbor IP: 186.45.131.188 (Risk Score: 55, Authority Score: 60)
---
## Recommended Actions
Monitoring
Priority: High
Action: Increase logging verbosity and review recent activity from this IP
Rationale: Elevated risk score (55/100) warrants enhanced visibility
Firewall Rules
| Platform | Rule |
|---|---|
| iptables | `iptables -A INPUT -s 186.45.131.193 -j DROP` |
| nftables | `nft add rule inet filter input ip saddr 186.45.131.193 drop` |
| nginx | `deny 186.45.131.193;` |
| pfSense | `186.45.131.193/32` |
| Cloudflare WAF | Block IP with expression: `ip.src eq 186.45.131.193` |
| AWS WAF | Add IP address 186.45.131.193/32 to block list |
---
## Analyst Notes
The IP presents moderate risk primarily due to its location within a subnet with 50% abuse density and presence on multiple DNS blacklists. No active threat indicators or malicious activity have been observed. The neighbor IP (186.45.131.188) shares the same risk profile, suggesting coordinated or shared infrastructure. Implement the recommended firewall rules and monitor for any behavioral changes. Consider blocking at the perimeter level while maintaining logging for forensic analysis.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Telecommunication Services of Trinidad and Tobago |
| ASN | AS5639 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | LACNIC |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 186-45-131-193.dynamic.tstt.net.tt |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 186-45-131-193.dynamic.tstt.net.tt |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User โ Residential ISP endpoint |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 17% | 9 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-10 16:14:14 UTC |
| Last Seen | 2026-06-26 02:33:48 UTC |
| Profile Built | 2026-06-26 02:41:45 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.