Network Report

AS136787 — PacketHub S.A.

What Predax has observed across this network's address space, and what it means for traffic screening.

Addresses observed
35
97% carried a flag

About this network

AS136787, operated by PacketHub S.A., is hosting space that is heavily used for anonymization. Of the 35 addresses we have observed on it, 97% are VPN endpoints. An address arriving from this network usually says where a tunnel ends, not where the person behind it is.

34 of the 35 observed addresses (97%) carried a notable risk score of 40 or higher when last checked. That concentration is the network's defining feature: it does not mean any individual visitor is hostile, but it does mean this network's addresses start from a lower trust position than ordinary hosting space.

Observed
35
distinct addresses checked
Flagged
97%
34 with any threat flag
Notable risk
97%
34 scoring 40+
Countries
11
where addresses geolocate

Flag composition

Share of observed addresses carrying each classification when last checked.

VPN3497%
Proxy00%
Tor00%
Datacenter3497%

Geography

United Kingdom
12
United States
10
Germany
3
Bulgaria
2
Sweden
2
Australia
1
Most-seen cities

London (GB) · Frankfurt am Main (DE) · Miami (US) · New York (US) · Sofia (BG) · Stockholm (SE)

Observation window

Addresses on this network have been looked up through Predax between January 12, 2026 and August 31, 2026. Each figure on this page reflects an address's most recent check, not a permanent record.

Geographically, the observed addresses span 11 countries, with the largest share (12 of 35) geolocating to United Kingdom.

Should you screen traffic from this network?

Screening traffic from this network is a defensible default for checkout, login and signup flows: the anonymization share is high enough that an address here tells you little about who is actually connecting.

It is still worth screening by score rather than blocking the whole network — VPN use is mainstream, and a blanket network block also turns away the privacy-conscious customers routing through it. A challenge (CAPTCHA or verification) keeps them while stopping most automation.

If your site takes signups, logins or payments, screening traffic from networks like this one is the practical takeaway — the Predax Security plugin for WordPress and the WooCommerce fraud plugin both do it automatically, challenging by score instead of blocking the whole network.

Addresses observed on this network

A sample of the most-looked-up addresses — each links to its full report. Capped at 12.

Check Another IP