193.36.225.96📋 Copy

# IP Intelligence Briefing: 193.36.225.96/32

## Executive Summary

IP address 193.36.225.96 presents a low-to-moderate risk profile with a risk score of 25. The IP is assigned to ASN 206092 (VPN Consumer Los Angeles, United States) within the 193.36.225.0/24 block. Current assessment indicates limited active threat indicators, though geolocation data shows significant inconsistencies requiring validation.

## Technical Profile

Ownership & Classification

• ASN: 206092
• Organization: VPN Consumer Los Angeles, United States
• Network Block: 193.36.225.0/24
• RIR: RIPE
• Network Role: Firewalled / No Services Detected
• Classification Flags: Not CDN, not Cloud, not Proxy, not Tor, not Hosting, not Mobile

Network Characteristics

• Open Ports: None detected
• DNS Resolution: No forward resolution; no PTR records
• Email Authentication: SPF and DMARC records absent
• HTTP Services: No active web services; TLS certificates not detected

## Threat Intelligence

Current Threat Indicators

• Blacklist Status: Not listed on major threat feeds (0 blacklists)
• Campaign Associations: No known active campaigns
• Abuse Confidence Score: Not applicable
• Known Attacker Status: Negative
• Spam Source Status: Negative

Historical Activity

• Observation Count: 16 signals tracked
• Last Observed: 2026-07-28
• Threat Persistence: 0 days (no persistent malicious activity detected)
• Ownership Changes: 0 changes recorded

Geolocation Anomalies

• Reported Location: Los Angeles, California, US
• Geolocation Plausibility: FALSE
• Distance Violation: 9,014 km from claimed location
• RTT Anomaly: Observed RTT 78ms vs. minimum possible 180.3ms for stated distance
• Source: Multi-signal inference with 28% confidence

Control Plane

• Route Stability: Unstable (is_route_stable: false)
• DNSBL Lists: 1 of 8 total lists
• RPKI/Irr Consistency: Not validated
• Origin ASN: 206092

## Neighborhood Analysis

Subnet Context: 193.36.225.0/24

• Total Siblings: 64 IPs
• Abuse Density: 0 (low)
• Risk Distribution: 62 low-risk, 1 medium-risk, 0 high-risk
• Notable Neighbors:

- 193.36.225.29: Risk Score 60 (elevated)

- 193.36.225.26: Risk Score 25

- 193.36.225.31: Risk Score 25

- Remaining 59 siblings: Risk Score 0

Network Relationships

• Primary relationship: Same Network (LOS-ANGELES-CA-USA-193-36-225-0)
• No external organizational or hostname relationships identified

## Recommended Actions

Immediate Mitigation

• No blocking required based on current risk profile
• Monitoring recommended due to geolocation inconsistencies and unstable routing

Firewall/Network Rules

• No specific iptables/nftables rules generated (low risk profile)
• Consider monitoring for port scan activity given "Firewalled" classification

Intelligence Priorities

1. Validate actual physical location (geolocation data flagged as implausible)

2. Monitor subnet 193.36.225.0/24 for correlation with 193.36.225.29 (risk score 60)

3. Track route stability changes for ASN 206092

4. Investigate Alienvault-OTX association (3 threat pulses recorded)

---

Assessment: This IP represents a standard low-risk endpoint with firewalled services. The primary concern is geolocation data inconsistency, which may indicate hosting infrastructure misconfiguration or spoofing. No immediate blocking action recommended, but maintain monitoring awareness.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.