136.144.35.147📋 Copy

# IP INTELLIGENCE BRIEFING: 136.144.35.147

Date: 2026-07-26

Classification: LOW RISK / CLEAN

Prepared For: SOC Operations

---

## EXECUTIVE SUMMARY

IP address 136.144.35.147 is classified as Low Risk with a risk score of 20/100. The address belongs to VPN Consumer New Jersey, United States of America (ASN 396356) and resides in the 136.144.35.0/24 subnet. No active threat indicators or malicious indicators were identified. The subnet maintains a clean classification with minimal abuse density (0.0101).

---

## NETWORK OWNERSHIP & CLASSIFICATION

• Organization: VPN Consumer New Jersey, United States of America
• ASN: 396356
• CIDR Block: 136.144.35.0/24
• Geolocation: United States, New Jersey, Trenton
• Network Classification: Firewalled / No Services
• Infrastructure Type: No CDN, proxy, Tor, hosting, cloud, or mobile carrier detected
• BGP Prefix: 136.144.35.0/24
• Route Stability: Unstable (isRouteStable: false)
• DNSSEC Valid: Yes

---

## THREAT INDICATORS ASSESSMENT

Current Threat Status: CLEAN

No threat indicators, reputation sources, or associated campaigns were identified.

---

## NETWORK NEIGHBORHOOD ANALYSIS

Subnet: 136.144.35.147/24

The subnet exhibits minimal abuse density with 84 low-risk and 8 medium-risk neighboring IPs. Only 1 threat sibling identified within the /24 block.

---

## SERVICES & PORTS ANALYSIS

Services Detected: None

• Open Ports: Empty
• HTTP Title: None
• TLS Certificate: None
• Server Banner: None
• Forward Resolution: 0 hosts
• PTR Hostnames: None

The IP presents as firewalled with no active service exposure.

---

## OBSERVATION HISTORY

Total Observations: 17

Recent Signal Summary (2026-07-26):

• Network classification signals observed
• Port scanning activity detected
• Traceroute validation with RTT discrepancy noted
• Ownership and threat persistence data collected

Historical Indicators:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

---

## GEOSPATIAL VALIDATION

Status: GEOLOCATION ANOMALY DETECTED

• Claimed Location: Trenton, New Jersey, US
• Geographic Distance: 6,051.2 km
• Observed RTT: 20.0 ms (minimum)
• Minimum Possible RTT: 121.0 ms
• Validation Status: geoPlausible = false
• Violation: RTT 20.0ms < minimum possible 121.0ms for 6051km

The observed RTT contradicts the claimed geolocation, suggesting potential data inconsistency or spoofing.

---

## EMAIL REPUTATION

• Email Reputation: Not available
• Sender Score: Not available
• SPF Record: Not configured
• DMARC Record: Not configured
• TXT Record Count: 0

No email authentication records detected.

---

## CONTROL PLANE DATA

• Operator Score: 0.1304 (Minimal)
• RPKI State: Not available
• IRR Consistency: Not available
• Route Changes (30d): 0
• MoAS: No
• DNSBL Listed Count: 0
• DNSBL Total Lists: 8
• Delegation Age Days: Not available

---

## SECURITY RECOMMENDATIONS

Action Status: No specific actions recommended based on current risk profile.

Suggested Monitoring:

• Maintain passive monitoring due to geolocation inconsistency
• Monitor for service emergence on previously firewalled IP
• Track subnet 136.144.35.0/24 for threat sibling activity

Firewall Considerations:

• Current low-risk profile does not warrant blocking
• Consider geo-filtering if Trenton, NJ traffic is not expected
• Monitor for changes in network role classification

---

## RISK ASSESSMENT

Overall Risk Level: LOW (Score: 20/100)

Key Risk Factors:

• None currently identified

Risk Mitigation:

• No immediate action required
• Continue baseline monitoring

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.