136.144.19.38📋 Copy

# IP INTELLIGENCE BRIEFING

IP Address: 136.144.19.38/32

Classification: Moderate Risk (Score: 60/100)

Date: 2026-07-29

---

## EXECUTIVE SUMMARY

The IP address 136.144.19.38 is assigned to VPN Consumer Miami, United States (ASN 206092) and presents a moderate risk profile. The address is classified as part of a VPN infrastructure with firewall enforcement. While not persistently malicious, the IP has triggered one honeypot detection and appears on one DNSBL list.

## INFRASTRUCTURE PROFILE

• Organization: VPN Consumer Miami, United States
• ASN: 206092
• CIDR Block: 136.144.19.0/24
• RIR: ARIN
• Network Role: Firewalled / No Services Detected
• Service Classification: VPN

## THREAT INDICATORS

• Risk Score: 60/100 (Moderate)
• Honeypot Hits: 1
• DNSBL Listings: 1 of 8 lists
• Blacklist Count: 0
• Known Attacker: False
• Tor Exit Node: False
• Persistence: Not persistently malicious
• Threat Observation Count: 1

## GEOLOCATION ANALYSIS

• Reported Location: Netherlands (NL), Amsterdam
• Coordinates: 52.13°N, 5.29°E
• Geo Validation: FAILED (geoPlausible: false)
• Note: Geographic data shows inconsistencies with organizational registration (Miami, US)

## NETWORK CONTEXT

Subnet Analysis (136.144.19.0/24):

• Abuse Density: 0.00 (clean)
• Subnet Classification: Clean
• Total Siblings: 4 (including subject IP)
• Active Siblings: 1
• Threat Siblings: 0

Neighbor IP Risk Distribution:

All neighboring IPs demonstrate low-risk characteristics, indicating the subnet is not broadly associated with malicious activity.

## OBSERVATION HISTORY

• Total Observations: 17
• Recent Classification: Mostly clean (abuse density: 0.25)
• Ownership Changes: 0 (stable)
• Threat Persistence: Not persistent
• Recent Signals: Ownership and geolocation data resolved with high confidence (0.85-0.95)

## RELATIONSHIP GRAPH

• Same Network Relationships: 2 entries (MIAMI-USA-136-144-19-0)
• Related Organizations: VPN Consumer Miami, United States
• Certificates: None detected
• Hostnames: None resolved

## RECOMMENDED ACTIONS

Severity: High

Category: Monitoring

Recommended Actions:

1. Increase logging verbosity for traffic from this IP

2. Review recent activity for potential abuse patterns

3. Monitor for changes in risk indicators

Firewall Rules:

## ANALYST NOTES

The elevated risk score (60/100) warrants attention but should be evaluated in context:

• The subnet demonstrates clean characteristics with low-risk neighbors
• VPN Consumer services are legitimate infrastructure but may be leveraged for various purposes
• Honeypot hit suggests the IP has been probed by automated reconnaissance systems
• Geographic inconsistencies warrant additional verification if this IP appears in threat contexts

Recommendation: Monitor traffic patterns but do not block without additional contextual signals. Evaluate against known threat campaigns and correlate with other intelligence sources before implementing blocking measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.