IP Intelligence Briefing: 61.9.8.136/32
Executive Summary
Analysis of IP 61.9.8.136 classified the address as Low Risk with a risk score of 25. The endpoint was assessed as a residential or infrastructure host located in the Philippines. No active threat indicators were detected, but analysts recommended monitoring due to signal contradictions and low data confidence.
Network Ownership
The address was assigned to ABUSE CONVERGEPH (Converge_ICT_Network) under ASN 17639. Registration details indicated APNIC RIR affiliation. Ownership history showed one change with an average stability period of 37.8 days.
Geolocation and Routing
Geolocation data pointed to Pili, Bicol Region, Philippines. Validation efforts revealed a contradiction between geo sources, with some identifying the country as the United States. Routing data showed the BGP prefix 61.9.8.0/22 with valid DNSSEC. Average round-trip time measured 240ms.
Threat and Behavioral Analysis
Threat feeds returned no indicators. The IP was not flagged as a known attacker, spam source, or Tor exit node. Blacklist enumeration yielded zero entries. Behavioral logs recorded zero honeypot hits, WAF violations, or enumeration strikes.
Technical Profile
Service scans determined the host was firewalled with no open ports detected. DNS hygiene was rated Poor due to the absence of SPF and DMARC records, though DNSSEC was valid. The neighborhood classification was mostly clean, though 20 threat siblings were identified within the /24 subnet.
Recommendations
Analysts advised monitoring the address rather than blocking or ignoring it. The primary reason cited was the presence of signal contradictions regarding geolocation and low overall confidence in the profile (0.1833). No firewall rules were deemed necessary at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ABUSE CONVERGEPH |
| ASN | AS17639 |
| Network Name | Converge_ICT_Network |
| CIDR Block | 61.9.8.0/22 |
| RIR | APNIC |
| Country | PH |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS17639 |
| Network Prefix | 61.9.8.0/22 |
| Route mapping | Found |
| RPKI Status | Valid |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 6 |
| routing | 46% | 3 | 4 |
| services | 12% | 2 | 2 |
| ownership | 34% | 3 | 7 |
| reputation | 23% | 1 | 5 |
| geolocation | 31% | 2 | 5 |
| Overall | 29% | 13 | 29 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-13 03:14:51 UTC |
| Last Seen | 2026-09-14 17:33:54 UTC |
| Profile Built | 2026-09-14 17:39:57 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 42 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 61.9.8.136
Who owns the IP address 61.9.8.136?
61.9.8.136 is registered to ABUSE CONVERGEPH. The address falls within the 61.9.8.0/22 network block. Registration is held at APNIC.
Where is 61.9.8.136 located?
Geolocation data places 61.9.8.136 in Pili, Bicol Region, Philippines. The local time zone is Asia/Manila. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 61.9.8.136 malicious or safe?
61.9.8.136 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.