186.96.192.36📋 Copy

# IP Intelligence Briefing: 186.96.192.36/32

## Executive Summary

IP address 186.96.192.36 is classified as MODERATE RISK (score: 55) and belongs to COOPERATIVA DE ELECTRICIDAD DE PEDRO LURO, an electricity cooperative infrastructure in Pedro Luro, Buenos Aires, Argentina. The IP is currently firewalled with no active services, though the associated /24 subnet shows moderate abuse density requiring monitoring.

## Network Ownership & Classification

• ASN: 52490 (COOPERATIVA DE ELECTRICIDAD DE PEDRO LURO)
• Network Block: 186.96.192.0/21 (186.96.192.0 - 186.96.199.255)
• RIR: LACNIC (Latin America)
• Country: Argentina (AR)
• Region/City: Buenos Aires, Pedro Luro
• Service Classification: Firewalled / No Services
• IP Classification: Residential/Enterprise (not cloud, CDN, proxy, or Tor)

## Threat Indicators

• Blacklist Count: 0 (not listed on major blacklists)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None correlated
• Abuse Confidence Score: Not available

## DNS & Network Signals

• PTR Hostname: host-186.96.192.36.luronet.com.ar
• Forward Resolution: Confirmed (1 hostname)
• Email Authentication: No SPF/DMARC records present
• Control Plane: Route stability flagged as unstable (isRouteStable: false)
• DNSBL Listings: 3 out of 8 total lists

## Historical Observation (15 signals)

Recent observations from 2026-07-31 confirm consistent ownership and geolocation signals. No persistent malicious activity detected (threatPersistenceDays: 0). Ownership stability remains consistent with zero changes.

## Subnet Analysis (/24 Neighborhood)

The 186.96.192.0/24 subnet contains 24 sibling IPs with the following risk distribution:

• High Risk: 0 IPs
• Medium Risk: 16 IPs (scores 25-55)
• Low Risk: 8 IPs (scores 15-40)
• Abuse Density: 0 (minimal)

Notable neighbors include:

• 186.96.192.87 (risk: 55) – same risk tier as target IP
• 186.96.192.16, .18, .29 (risk: 40) – medium risk peers

## Related Entities

• Network: 186.96.192.0 - 186.96.199.255 (multiple associations)
• DNS Host: host-186.96.192.36.luronet.com.ar (5 DNS associations)
• Contact: Available via RDAP; abuse email: garciafabiang@gmail.com

## Recommended Actions for SOC

1. Monitor: Track for any service changes or port openings

2. Baseline: Establish traffic patterns given the moderate risk score (55)

3. Subnet Correlation: Monitor 186.96.192.0/24 for coordinated activity (16 medium-risk peers)

4. Firewall Policy: No immediate block recommended; allow with logging if not already permitted

5. Geolocation Validation: Confirm Argentina location via multiple signals (currently single-source inference)

## Risk Assessment

This IP represents legitimate infrastructure for an electricity cooperative. The moderate risk score likely stems from subnet-level activity rather than targeted malicious use. Current posture: ACCEPT WITH MONITORING. No immediate threat action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.