45.154.138.236📋 Copy

# IPDebrief Intelligence Briefing

Target: 45.154.138.236/32

Date: 2026-07-23

Classification: Low Risk / Residential-Grade VPN Infrastructure

---

## Executive Summary

IP address 45.154.138.236 is classified as Low Risk with an overall risk score of 25/100. The address is part of a residential-grade VPN network operated by ASN 206092 (FR-MARSEILLE-45-154-138-0) in Marseille, France. The IP shows no active services, no open ports, and minimal threat indicators. Historical monitoring indicates 17 observations with no persistent malicious activity detected.

---

## Network Ownership & Classification

---

## Threat Indicators

• Blacklist Status: 1 DNSBL listing (of 8 total lists)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable
• Active Threat Feeds: None

The control plane indicates a DNSBL listing with low severity. No known campaigns or threat feed matches were identified during analysis.

---

## Network Neighborhood Analysis

Subnet: 45.154.138.0/24

Total Siblings: 63 IPs

Abuse Density: 0.0952 (Low)

Classification: Mostly Clean

Threat Siblings: 6

Inherited Risk Score: 3

The /24 subnet demonstrates minimal abuse activity. Six neighboring IPs (45.154.138.28, .101, .103, .104) show identical risk scores of 25, consistent with the target IP. No high or medium-risk neighbors identified.

---

## Observation History

Total Observations: 17 signals

Risk Trend: Stable / Low

Recent observations (2026-07-23):

• Geolocation: Confirmed France (FR), Marseille coordinates (48.98, 3.65)
• Threat Listings: 1 blacklist listing detected
• Subnet Analysis: Abuse density 0.0952, inheritance risk 3
• DNSSEC: Valid
• Service Scanning: No open ports, no services detected

No escalation in threat posture observed. The IP has not demonstrated persistent malicious behavior.

---

## Relationship Graph

Connected Entities: 3 relationships identified

• Network Association: FR-MARSEILLE-45-154-138-0 (Same Network)

No associated hostnames, organizations, or certificates found. The IP operates in isolation without external reputation links.

---

## Service & Port Analysis

• Open Ports: None
• DNS Resolution: No forward resolution
• HTTP Services: None detected
• TLS Certificates: None
• Email Auth (SPF/DMARC): Not configured

The IP is firewalled with no publicly accessible services.

---

## Recommended Actions

---

## Intelligence Assessment

Threat Level: LOW

Action Required: NONE

Confidence: HIGH

The target IP 45.154.138.236 represents residential/VPN infrastructure with no active threat indicators. The subnet environment is clean with minimal abuse density. SOC analysts should treat this IP with standard monitoring procedures. No immediate blocking or mitigation actions are warranted based on current intelligence.

Key Indicators:

• Risk Score: 25/100
• No active services or open ports
• Low neighborhood abuse density (0.0952)
• No persistent malicious behavior
• Single low-severity DNSBL listing

---

*Report generated by IPDebrief Intelligence Platform*

*Data sources: Control plane, geolocation, DNS, threat feeds, historical observations*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.