178.20.31.136📋 Copy

# IP Intelligence Briefing: 178.20.31.136/32

## Executive Summary

IP 178.20.31.136 presents a Low Risk profile (risk score: 25) with no active threat indicators. The address is assigned to ALAXONA (ASN 46475) within the FINEGROUPSERVERS-LEASE network block (178.20.31.0/24). No malicious activity has been observed, and the IP shows no services currently accessible.

## Ownership and Registration

• Organization: ALAXONA
• Network Name: FINEGROUPSERVERS-LEASE
• CIDR Block: 178.20.31.0/24
• ASN: 46475
• RIR: RIPE
• Abuse Contact: Available via RDAP

## Geolocation Analysis

The IP resolves to London, England (GB) with moderate confidence. However, geolocation validation flags show inconsistency:

• Primary location: GB, London (52.36°N, 1.17°W)
• Alternative signals: United States (37.751°N, 97.822°W) with 0.70 confidence
• GeoPlausible validation: False
• RTT and geolocation distance metrics indicate potential routing anomalies

## Network Services Assessment

• Open Ports: None detected
• Service Status: Firewalled / No Services
• HTTP/HTTPS: No responses captured
• TLS Certificates: None
• DNS: No PTR records or forward resolution

## Threat Intelligence

• Risk Score: 25 (Low)
• Abuse Confidence Score: Not available
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Threat Persistence Days: 0
• Persistent Malicious: No

DNSBL Status: Listed on 1 of 8 total DNSBLs (operator score: 0.1304, labeled "Minimal")

## Historical Observations

Analysis of 11 observation records reveals:

• Recent activity logged July 2026
• Geo signal inconsistencies between GB and US locations
• No observed threat persistence or malicious behavior
• No ownership changes recorded

## Network Neighborhood (178.20.31.0/24)

The /24 subnet contains 5 sibling IPs:

• 178.20.31.41 (Risk: 25)
• 178.20.31.51 (Risk: 25)
• 178.20.31.95 (Risk: 0)
• 178.20.31.125 (Risk: 25)
• 178.20.31.130 (Risk: 0)

Subnet Abuse Density: 0 (Low threat concentration)

Classification: All sibling IPs classified as low risk

## Entity Relationships

• Network Links: FINEGROUPSERVERS-LEASE (same network)
• Hostnames: None detected
• Organizations: ALAXONA
• Certificates: None

## Recommended Actions

No specific firewall rules or blocking recommendations generated. The IP's low risk profile and lack of malicious indicators suggest continued monitoring without immediate action. The geolocation inconsistency warrants periodic re-evaluation if the IP begins generating traffic.

## Intelligence Assessment

This IP address is associated with a legitimate hosting infrastructure provider (ALAXONA) and shows no evidence of malicious use. The single DNSBL listing and geo-location anomalies are minor concerns that do not indicate active threat activity. SOC teams may monitor the subnet for service activity emergence but no immediate defensive actions are required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.