136.144.17.26📋 Copy

# IP Intelligence Briefing: 136.144.17.26/32

Date: 2026-07-22

Classification: Low Risk

Relevance: Network Defense / Threat Intelligence

---

## Executive Summary

IP address 136.144.17.26 is associated with a consumer VPN network operated by VPN Consumer Toronto, Canada (ASN 206092). The IP presents a low-risk profile (risk score: 25) with no active threat indicators, open services, or malicious reputation. The subnet exhibits minimal abuse density, suggesting legitimate consumer VPN usage patterns.

---

## Technical Profile

---

## Threat Assessment

Current Status: No active threat indicators detected. The IP does not appear in known threat feeds, is not a known attacker, and is not associated with spam campaigns or Tor exit nodes.

Risk Factors:

• Listed on 1 of 8 DNSBLs (dnsblListedCount: 1)
• Route stability flag: false (route changes observed)
• DNSSEC valid: true

No Evidence Of:

• Known malicious campaigns
• Tor exit node activity
• Spam source reputation
• Known attacker associations

---

## Observation History

Total Observations: 11 signals (all dated 2026-07-22)

Key Signals:

• Consistent geolocation identification: Toronto, Ontario, Canada
• Persistent organization attribution: VPN Consumer Toronto
• No ownership changes recorded
• Zero threat persistence indicators
• No malicious activity observed across observation window

Signal Confidence: High (0.70–0.95) across geolocation and ownership signals.

---

## Network Relationships

Subnet Analysis (136.144.17.0/24):

• Total IPs: 47
• Risk Distribution: 40 low risk, 2 medium risk, 0 high risk
• Abuse Density: 0 (minimal abuse)
• Classification: Consumer VPN network

Related Entities:

• Network associations: VPN-Consumer-Network (3 instances)
• No hostname, certificate, or cross-organization relationships detected

---

## Security Recommendations

Action Status: No immediate security actions required.

Assessment: The IP exhibits characteristics of legitimate consumer VPN usage. No firewall rules or blocking recommendations are generated based on the low-risk profile.

Recommended Monitoring:

• Track route stability changes (currently unstable)
• Monitor for service discovery if this IP transitions to active hosting
• Continue observation for any reputation degradation

---

## Intelligence Conclusion

IP 136.144.17.26 represents a low-risk consumer VPN endpoint with no malicious indicators. The subnet demonstrates minimal abuse patterns consistent with legitimate VPN service operations. No blocking or alerting actions are warranted at this time. Continue routine monitoring for any profile changes or reputation degradation.

Confidence Level: High

Last Updated: 2026-07-22

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.