186.96.199.83📋 Copy

# INTELLIGENCE BRIEFING: 186.96.199.83/32

Classification: High Risk

Date: 2026-07-31

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP address 186.96.199.83 is classified as High Risk with a risk score of 80/100. The address is associated with COOPERATIVA DE ELECTRICIDAD DE PEDRO LURO (ASN: 52490), a local electricity cooperative operating from Pedro Luro, Buenos Aires, Argentina. The IP is currently firewalled with no open services. Despite the lack of active threat indicators, the elevated risk score and DNSBL presence warrant defensive monitoring and consideration for blocking.

---

## OWNERSHIP AND INFRASTRUCTURE

---

## THREAT PROFILE

Risk Indicators:

• Risk Score: 80/100 (High)
• Abuse Confidence Score: Not calculated
• DNSBL Listed: 4 of 8 lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0

Network Classification:

• Provider/Infrastructure: No
• Cloud/CDN/Proxy: No
• Hosting/VPN: No
• Mobile/Residential: No
• Anycast/Bogon: No

---

## NETWORK BEHAVIOR

Service Analysis:

• Open Ports: None detected
• TLS Certificate: Not detected
• HTTP Banner: Not detected
• Status: Firewalled / No active services

DNS Analysis:

• PTR Record: host-186.96.199.83.luronet.com.ar
• Forward Resolution: 1 host
• Email Authentication: SPF/DMARC not configured
• Forward Confirmed: No

---

## TEMPORAL ANALYSIS

Observation History:

• Total Observations: 15
• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

Route Stability:

• Route Changes (30d): 0
• Route Stable: No
• RPKI State: Not validated
• IRR Consistency: Not validated

---

## SUBNET ANALYSIS

186.96.199.0/24 Neighborhood:

• Total Neighbors: 26
• Abuse Density: 3.8%
• Risk Distribution:

- High Risk: 1

- Medium Risk: 18

- Low Risk: 7

Notable High-Risk Neighbors:

• 186.96.199.132: Risk Score 80
• 186.96.199.145: Risk Score 70
• 186.96.199.27: Risk Score 55
• 186.96.199.33: Risk Score 55
• 186.96.199.77: Risk Score 55

---

## RELATIONSHIP GRAPH

Identified Relationships:

• Same Network: 186.96.192.0 - 186.96.199.255 (3 instances)
• DNS Association: host-186.96.199.83.luronet.com.ar (4 instances)

No additional external relationships (hostnames, organizations, certificates) identified.

---

## RECOMMENDED ACTIONS

Immediate Actions:

1. Increase Logging Verbosity: Monitor all activity from this IP for elevated risk score (80/100)

2. Consider Blocking: Recommended due to high risk classification and DNSBL presence

Firewall Rules:

```bash

# iptables

iptables -A INPUT -s 186.96.199.83 -j DROP

# nftables

nft add rule inet filter input ip saddr 186.96.199.83 drop

# nginx

deny 186.96.199.83;

# pfSense

186.96.199.83/32

```

Cloud Services:

• Cloudflare WAF: Block expression: `ip.src eq 186.96.199.83`
• AWS WAF: Add 186.96.199.83/32 to block list

---

## ANALYST NOTES

This IP presents an elevated risk profile primarily due to DNSBL presence and high risk score classification. The underlying infrastructure belongs to a legitimate electricity cooperative, and the address is actively firewalled with no open services. The subnet shows moderate abuse density at 3.8%, with several neighboring IPs also classified as high-risk.

No evidence of persistent malicious activity or known threat campaigns. Historical analysis indicates no ownership changes or threat persistence. The recommended actions prioritize monitoring and potential blocking based on the risk score alone, as specific threat indicators are absent.

Confidence Level: Medium

Priority: Monitor/Block Consideration

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.