136.144.35.152📋 Copy

# IP Intelligence Briefing: 136.144.35.152/32

Classification: LOW RISK — Passive Residential/ISP Allocated Address

Date of Analysis: Current

Risk Score: 25/100

---

## Executive Summary

IP 136.144.35.152 is a low-risk passive address allocated to VPN Consumer (ASN 396356) with no active threat indicators. The address shows minimal network activity, no open services, and no persistent malicious behavior. However, geolocation validation anomalies suggest potential routing inconsistencies requiring monitoring.

---

## Profile Details

Ownership:

• ASN: 396356
• Organization: VPN Consumer New Jersey, United States of America
• Network: 136.144.35.0/24 (NEW-JERSEY-US-136-144-35-0)
• RIR: ARIN

Geolocation:

• Country: United States (US)
• Region: New Jersey
• City: Trenton
• Confidence: GeoPlausible validation failed (distance discrepancy noted)

Network Role:

• Classification: Firewalled / No Services
• No open ports detected
• No TLS certificates or web services observed

---

## Threat Indicators

Current Threat Status: CLEAN

• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Known Campaigns: None

Control Plane Signals:

• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)
• BGP Prefix: 136.144.35.0/24
• Route Stability: False (route changes detected in 30-day window)

---

## Historical Observations

Signal History: 15 Total Observations

Recent observations reveal geolocation validation anomalies:

• RTT measurements show claimed coordinates (40.2187° N, -74.7404° W) inconsistent with minimum possible RTT for 6,051 km distance
• Multiple RTT violations flagged (observed ~21ms vs. expected ~121ms)
• Network classification historically assessed as "clean" with abuse density 0.0101

Threat Persistence:

• No persistent malicious behavior detected
• Threat observation count: 0
• Ownership stability: No changes recorded

---

## Neighborhood Analysis

Subnet: 136.144.35.0/24

• Total Siblings: 98
• Active Siblings: 9
• Abuse Density: 0.0000 (Very Low)

Risk Distribution:

• High Risk: 0
• Medium Risk: 8
• Low Risk: 84

Notable Sibling: 136.144.35.7 (Risk Score: 25)

The subnet demonstrates minimal abuse density with predominantly low-risk allocations.

---

## Relationships

Connected Entities: 3

• Same Network: NEW-JERSEY-US-136-144-35-0 (repeated)
• No organizational, hostname, or certificate associations identified

---

## Recommended Actions

Priority: LOW

The IP address presents minimal threat to organizational security. Standard passive monitoring is appropriate. No immediate blocking or firewall rule implementation required.

Monitoring Recommendations:

• Continue passive observation for geolocation consistency
• Monitor for service activation (port opening, TLS certificate issuance)
• Track route stability changes

---

## Intelligence Assessment

This IP address represents a standard residential/ISP allocation with no active threat indicators. The low risk score (25), absence of blacklist entries, and minimal neighborhood abuse density support continued passive monitoring. The geolocation validation anomalies are consistent with VPN provider routing characteristics rather than active malicious behavior. SOC analysts may treat this as a low-priority observation requiring no immediate defensive action.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.