# 193.36.225.96 — IP Intelligence Summary 193.36.225.96 is an IPv4 address operated by VPN Consumer Los Angeles, United States (AS206092), geolocated to Los Angeles, United States. As of September 2, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/193.36.225.96 - Last updated: 2026-09-02 ## Ownership - Organization: VPN Consumer Los Angeles, United States - Network name: LOS-ANGELES-CA-USA-193-36-225-0 - Allocated block: 193.36.225.0/24 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: RIPE ## Location - City: Los Angeles - Region: California - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 193.36.225.96/32 \## Executive Summary IP address 193.36.225.96 presents a low-to-moderate risk profile with a risk score of 25. The IP is assigned to ASN 206092 (VPN Consumer Los Angeles, United States) within the 193.36.225.0/24 block. Current assessment indicates limited active threat indicators, though geolocation data shows significant inconsistencies requiring validation. \## Technical Profile \### Ownership & Classification \- **ASN**: 206092 \- **Organization**: VPN Consumer Los Angeles, United States \- **Network Block**: 193.36.225.0/24 \- **RIR**: RIPE \- **Network Role**: Firewalled / No Services Detected \- **Classification Flags**: Not CDN, not Cloud, not Proxy, not Tor, not Hosting, not Mobile \### Network Characteristics \- **Open Ports**: None detected \- **DNS Resolution**: No forward resolution; no PTR records \- **Email Authentication**: SPF and DMARC records absent \- **HTTP Services**: No active web services; TLS certificates not detected \## Threat Intelligence \### Current Threat Indicators \- **Blacklist Status**: Not listed on major threat feeds (0 blacklists) \- **Campaign Associations**: No known active campaigns \- **Abuse Confidence Score**: Not applicable \- **Known Attacker Status**: Negative \- **Spam Source Status**: Negative \### Historical Activity \- **Observation Count**: 16 signals tracked \- **Last Observed**: 2026-07-28 \- **Threat Persistence**: 0 days (no persistent malicious activity detected) \- **Ownership Changes**: 0 changes recorded \### Geolocation Anomalies \- **Reported Location**: Los Angeles, California, US \- **Geolocation Plausibility**: FALSE \- **Distance Violation**: 9,014 km from claimed location \- **RTT Anomaly**: Observed RTT 78ms vs. minimum possible 180.3ms for stated distance \- **Source**: Multi-signal inference with 28% confidence \### Control Plane \- **Route Stability**: Unstable (is_route_stable: false) \- **DNSBL Lists**: 1 of 8 total lists \- **RPKI/Irr Consistency**: Not validated \- **Origin ASN**: 206092 \## Neighborhood Analysis \### Subnet Context: 193.36.225.0/24 \- **Total Siblings**: 64 IPs \- **Abuse Density**: 0 (low) \- **Risk Distribution**: 62 low-risk, 1 medium-risk, 0 high-risk \- **Notable Neighbors**: \- 193.36.225.29: Risk Score 60 (elevated) \- 193.36.225.26: Risk Score 25 \- 193.36.225.31: Risk Score 25 \- Remaining 59 siblings: Risk Score 0 \### Network Relationships \- Primary relationship: Same Network (LOS-ANGELES-CA-USA-193-36-225-0) \- No external organizational or hostname relationships identified \## Recommended Actions \### Immediate Mitigation \- **No blocking required** based on current risk profile \- **Monitoring recommended** due to geolocation inconsistencies and unstable routing \### Firewall/Network Rules \- No specific iptables/nftables rules generated (low risk profile) \- Consider monitoring for port scan activity given "Firewalled" classification \### Intelligence Priorities 1. Validate actual physical location (geolocation data flagged as implausible) 2. Monitor subnet 193.36.225.0/24 for correlation with 193.36.225.29 (risk score 60) 3. Track route stability changes for ASN 206092 4. Investigate Alienvault-OTX association (3 threat pulses recorded) \--- **Assessment**: This IP represents a standard low-risk endpoint with firewalled services. The primary concern is geolocation data inconsistency, which may indicate hosting infrastructure misconfiguration or spoofing. No immediate blocking action recommended, but maintain monitoring awareness. ## Nearby addresses - 193.36.225.1 (https://ipdebrief.com/193.36.225.1) - 193.36.225.4 (https://ipdebrief.com/193.36.225.4) - 193.36.225.5 (https://ipdebrief.com/193.36.225.5) - 193.36.225.7 (https://ipdebrief.com/193.36.225.7) - 193.36.225.8 (https://ipdebrief.com/193.36.225.8) - 193.36.225.9 (https://ipdebrief.com/193.36.225.9) - 193.36.225.26 (https://ipdebrief.com/193.36.225.26) - 193.36.225.28 (https://ipdebrief.com/193.36.225.28) - 193.36.225.29 (https://ipdebrief.com/193.36.225.29) - 193.36.225.31 (https://ipdebrief.com/193.36.225.31) - 193.36.225.34 (https://ipdebrief.com/193.36.225.34) - 193.36.225.37 (https://ipdebrief.com/193.36.225.37) --- Source: IPDebrief, "193.36.225.96 IP intelligence", https://ipdebrief.com/193.36.225.96, updated 2026-09-02. Assessments are probabilistic.