136.144.43.182📋 Copy

# IP INTELLIGENCE BRIEFING: 136.144.43.182/32

Classification: LOW RISK / CLEAN

Date: 2026-07-27

Prepared For: SOC Operations

Intel Level: Standard

---

## EXECUTIVE SUMMARY

IP 136.144.43.182 presents as a low-risk consumer VPN endpoint with minimal threat indicators. Risk score of 25/100 indicates minimal concern. No active services detected, no open ports, and no known malicious associations. Subnet neighborhood shows low abuse density at 3.66%.

---

## OWNERSHIP & GEOGRAPHY

Network: 136.144.43.0/24 (DALLAS-US-136-144-43-0)

Organization: VPN Consumer Dallas, United States of America

ASN: 396356

RIR: ARIN

Abuse Contact: abuse-reports@vpnconsumer.com

Geolocation: Dallas, TX, United States

Accuracy: 150km radius (multiple sources)

Timezone: America/Chicago

*Note: Geolocation shows cross-referenced data with Netherlands coordinates in some probe results; primary consensus indicates Dallas, US.*

---

## THREAT ASSESSMENT

Risk Score: 25/100 (LOW)

Abuse Confidence: N/A

Blacklist Status: Clean (0 lists)

Threat Indicators: None detected

Classification Flags:

• Not a Tor exit node
• Not a known attacker
• Not a spam source
• Not cloud/hosting/proxy infrastructure
• Firewalled / No services accessible

---

## NETWORK BEHAVIOR

Open Ports: None detected

TLS Certificates: None

HTTP Services: None

DNS Records: No forward resolution

Email Auth: No SPF/DMARC configured

Control Plane:

• DNSSEC: Valid
• Route Stability: False (0 changes in 30 days)
• DNSBL Listed: 1 of 8 lists
• Operator Score: 0.1304 (Minimal)

---

## SUBNET ANALYSIS (136.144.43.0/24)

Total IPs: 82

Active IPs: 25

Threat IPs: 3

Abuse Density: 0.0366 (3.66%)

Risk Distribution:

• High Risk: 0
• Medium Risk: 21
• Low Risk: 60

Notable Neighbors:

• 136.144.43.63: Risk Score 50 (Medium)
• 136.144.43.64: Risk Score 50 (Medium)
• 136.144.43.66: Risk Score 50 (Medium)
• 136.144.43.5: Risk Score 25 (Low)

---

## OBSERVATION HISTORY

Total Signals: 14 observations

Most Recent: 2026-07-27 08:14:43 UTC

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No
• Threat Observation Count: 0

Recent Signals:

1. Port scanning activity detected (confidence: 70%)

2. Ownership verification checks (confidence: 85%)

3. Subnet abuse density analysis (confidence: 75%)

4. RIR/organization resolution (confidence: 90-95%)

Trend: Stable. No escalation in threat indicators over observation period.

---

## RELATIONSHIP GRAPH

Linked Entities: 3 relationships detected

• All relationships: Same Network (DALLAS-US-136-144-43-0)
• No external hostname associations
• No organization/certificate links beyond network scope

---

## RECOMMENDED ACTIONS

Risk Level: LOW RISK

Firewall Policy: Permissive / Monitor

• No blocking required based on current profile
• Standard logging recommended for network visibility

Detection Rules:

• Monitor for service activation (ports opening)
• Watch for DNS query patterns
• Track for association with known malicious IPs

Mitigation Priority: LOW

No immediate blocking or containment actions warranted.

---

## INTELLIGENCE NOTE

This IP is classified as a consumer VPN endpoint. The /24 subnet shows typical residential VPN characteristics with low abuse density. The three threat siblings in the subnet represent isolated incidents. No correlation with active campaigns or known attacker infrastructure. SOC teams may safely allow traffic with standard logging, but should monitor for behavior changes indicating compromised host activity.

---

END BRIEFING

Intel Source: IPDebrief

Classification: Defensive Security Operations

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.