186.96.197.43
IP Intelligence Dossier
Your IP: 216.73.216.123
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 186.96.197.43
*Generated via IPDebrief Threat Intelligence Platform*
---
**1. Core Profile**
- Risk Score: 15 (Low Risk)
- Ownership: Registered to COOPERATIVA DE ELECTRICIDAD DE PEDRO LURO (Argentina) under ASN 52490.
- Geolocation: Buenos Aires, Argentina (Pedro Luro). Coordinates: -39.48° Lat, -62.68° Lon.
- Network Role: Residential / Firewalled; no cloud, CDN, or infrastructure services detected.
- Threat Indicators: No malicious activity, spam, or known attacker associations.
---
**2. Observation History**
- Minimal Signals: Recent observations show low-risk DNS activity (CAA, DNSSEC) and stable ownership.
- Notable Trends: No spikes in scans, DNS anomalies, or threat-related signals.
- Geolocation Consistency: Plausible local origin; no geographic discrepancies.
---
**3. Network Relationships**
- Subnet: Part of 186.96.192.0/21 (1024 IPs), managed by LACNIC.
- DNS Associations: Linked to host-186.96.197.43.luronet.com.ar (local domain).
- Neighboring IPs:
- High-Risk Neighbors: 186.96.197.193 (55%), 186.96.197.207 (80%), 186.96.197.238 (80%).
- Subnet Abuse Density: 20% (moderate risk).
---
**4. Actionable Insights**
- Monitor Subnet: Elevated risk in neighboring IPs (e.g., 186.96.197.207, 238) may indicate broader network compromise.
- Verify DNS: Confirm legitimacy of luronet.com.ar and ensure no DNS misconfigurations.
- Check Ownership: Validate cooperative’s abuse contact (garciafabiang@gmail.com) for potential reporting.
- Baseline Traffic: Establish baseline for this IP’s low-risk profile to detect anomalies.
---
Conclusion: 186.96.197.43 appears benign, but its subnet contains higher-risk neighbors. SOC teams should prioritize monitoring the subnet for lateral movement or shared vulnerabilities. No immediate mitigation required for this IP itself.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | COOPERATIVA DE ELECTRICIDAD DE PEDRO LURO |
| ASN | AS52490 |
| Network Name | 186.96.192.0 - 186.96.199.255 |
| CIDR Block | 186.96.192.0/21 |
| RIR | LACNIC |
| Country | AR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | host-186.96.197.43.luronet.com.ar |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | host-186.96.197.43.luronet.com.ar |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-dropbear D J<Q???rmPV9Lcurve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group1 |
🔐 TLS Certificate
No certificate
Issued by —
N/A
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 35% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 15% | 6 | 7 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-20 05:44:08 UTC |
| Last Seen | 2026-06-09 01:14:55 UTC |
| Profile Built | 2026-06-05 03:59:05 UTC |
| Data Freshness | Live |
| Signal Types | 12 |
| Total Observations | 12 |
🔍 12 signal types · 12 observations collected
This report is generated from 12+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.