# 45.154.138.236 — IP Intelligence Summary 45.154.138.236 is an IPv4 address operated by VPN Consumer Marseille, France (AS206092), geolocated to Marseille, France. As of October 18, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/45.154.138.236 - Last updated: 2026-10-18 ## Ownership - Organization: VPN Consumer Marseille, France - Network name: FR-MARSEILLE-45-154-138-0 - Allocated block: 45.154.138.0/24 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: ARIN ## Location - City: Marseille - Region: Provence-Alpes-Côte d'Azur - Country: France - Time zone: Europe/Paris ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IPDebrief Intelligence Briefing **Target:** 45.154.138.236/32 **Date:** 2026-07-23 **Classification:** Low Risk / Residential-Grade VPN Infrastructure \--- \## Executive Summary IP address 45.154.138.236 is classified as **Low Risk** with an overall risk score of 25/100. The address is part of a residential-grade VPN network operated by ASN 206092 (FR-MARSEILLE-45-154-138-0) in Marseille, France. The IP shows no active services, no open ports, and minimal threat indicators. Historical monitoring indicates 17 observations with no persistent malicious activity detected. \--- \## Network Ownership & Classification | Field | Value | |-------|-------| | **ASN** | 206092 | | **Organization** | VPN Consumer Marseille, France | | **NetName** | FR-MARSEILLE-45-154-138-0 | | **CIDR Block** | 45.154.138.0/24 | | **Country** | FR (France) | | **City** | Marseille | | **Region** | Provence-Alpes-Côte d'Azur | | **Classification** | Firewalled / No Services | | **ISP Type** | Residential/Consumer VPN | \--- \## Threat Indicators \- **Blacklist Status:** 1 DNSBL listing (of 8 total lists) \- **Tor Exit Node:** No \- **Known Attacker:** No \- **Spam Source:** No \- **Abuse Confidence Score:** Not applicable \- **Active Threat Feeds:** None The control plane indicates a DNSBL listing with low severity. No known campaigns or threat feed matches were identified during analysis. \--- \## Network Neighborhood Analysis **Subnet:** 45.154.138.0/24 **Total Siblings:** 63 IPs **Abuse Density:** 0.0952 (Low) **Classification:** Mostly Clean **Threat Siblings:** 6 **Inherited Risk Score:** 3 The /24 subnet demonstrates minimal abuse activity. Six neighboring IPs (45.154.138.28, .101, .103, .104) show identical risk scores of 25, consistent with the target IP. No high or medium-risk neighbors identified. \--- \## Observation History **Total Observations:** 17 signals **Risk Trend:** Stable / Low Recent observations (2026-07-23): \- **Geolocation:** Confirmed France (FR), Marseille coordinates (48.98, 3.65) \- **Threat Listings:** 1 blacklist listing detected \- **Subnet Analysis:** Abuse density 0.0952, inheritance risk 3 \- **DNSSEC:** Valid \- **Service Scanning:** No open ports, no services detected No escalation in threat posture observed. The IP has not demonstrated persistent malicious behavior. \--- \## Relationship Graph **Connected Entities:** 3 relationships identified \- **Network Association:** FR-MARSEILLE-45-154-138-0 (Same Network) No associated hostnames, organizations, or certificates found. The IP operates in isolation without external reputation links. \--- \## Service & Port Analysis \- **Open Ports:** None \- **DNS Resolution:** No forward resolution \- **HTTP Services:** None detected \- **TLS Certificates:** None \- **Email Auth (SPF/DMARC):** Not configured The IP is firewalled with no publicly accessible services. \--- \## Recommended Actions | Action Type | Recommendation | |-------------|----------------| | **Firewall Rule** | No action required (Low Risk) | | **Monitoring** | Standard monitoring only | | **Block** | Not recommended | | **Allow** | Permissive default appropriate | \--- \## Intelligence Assessment **Threat Level:** LOW **Action Required:** NONE **Confidence:** HIGH The target IP 45.154.138.236 represents residential/VPN infrastructure with no active threat indicators. The subnet environment is clean with minimal abuse density. SOC analysts should treat this IP with standard monitoring procedures. No immediate blocking or mitigation actions are warranted based on current intelligence. **Key Indicators:** \- Risk Score: 25/100 \- No active services or open ports \- Low neighborhood abuse density (0.0952) \- No persistent malicious behavior \- Single low-severity DNSBL listing \--- *Report generated by IPDebrief Intelligence Platform* *Data sources: Control plane, geolocation, DNS, threat feeds, historical observations* ## Nearby addresses - 45.154.138.28 (https://ipdebrief.com/45.154.138.28) - 45.154.138.42 (https://ipdebrief.com/45.154.138.42) - 45.154.138.59 (https://ipdebrief.com/45.154.138.59) - 45.154.138.81 (https://ipdebrief.com/45.154.138.81) - 45.154.138.101 (https://ipdebrief.com/45.154.138.101) - 45.154.138.102 (https://ipdebrief.com/45.154.138.102) - 45.154.138.103 (https://ipdebrief.com/45.154.138.103) - 45.154.138.104 (https://ipdebrief.com/45.154.138.104) - 45.154.138.105 (https://ipdebrief.com/45.154.138.105) - 45.154.138.106 (https://ipdebrief.com/45.154.138.106) - 45.154.138.107 (https://ipdebrief.com/45.154.138.107) - 45.154.138.108 (https://ipdebrief.com/45.154.138.108) --- Source: IPDebrief, "45.154.138.236 IP intelligence", https://ipdebrief.com/45.154.138.236, updated 2026-10-18. Assessments are probabilistic.