# 136.144.43.182 — IP Intelligence Summary 136.144.43.182 is an IPv4 address operated by VPN Consumer Dallas, United States of America (AS396356), geolocated to Dallas, United States. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/136.144.43.182 - Last updated: 2026-10-06 ## Ownership - Organization: VPN Consumer Dallas, United States of America - Network name: DALLAS-US-136-144-43-0 - Allocated block: 136.144.43.0/24 - ASN: AS396356 (https://ipdebrief.com/asn/396356) - Regional registry: ARIN ## Location - City: Dallas - Region: TX - Country: United States - Time zone: America/Chicago ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP INTELLIGENCE BRIEFING: 136.144.43.182/32 **Classification:** LOW RISK / CLEAN **Date:** 2026-07-27 **Prepared For:** SOC Operations **Intel Level:** Standard \--- \## EXECUTIVE SUMMARY IP 136.144.43.182 presents as a low-risk consumer VPN endpoint with minimal threat indicators. Risk score of 25/100 indicates minimal concern. No active services detected, no open ports, and no known malicious associations. Subnet neighborhood shows low abuse density at 3.66%. \--- \## OWNERSHIP & GEOGRAPHY **Network:** 136.144.43.0/24 (DALLAS-US-136-144-43-0) **Organization:** VPN Consumer Dallas, United States of America **ASN:** 396356 **RIR:** ARIN **Abuse Contact:** abuse-reports@vpnconsumer.com **Geolocation:** Dallas, TX, United States **Accuracy:** 150km radius (multiple sources) **Timezone:** America/Chicago *Note: Geolocation shows cross-referenced data with Netherlands coordinates in some probe results; primary consensus indicates Dallas, US.* \--- \## THREAT ASSESSMENT **Risk Score:** 25/100 (LOW) **Abuse Confidence:** N/A **Blacklist Status:** Clean (0 lists) **Threat Indicators:** None detected **Classification Flags:** \- Not a Tor exit node \- Not a known attacker \- Not a spam source \- Not cloud/hosting/proxy infrastructure \- Firewalled / No services accessible \--- \## NETWORK BEHAVIOR **Open Ports:** None detected **TLS Certificates:** None **HTTP Services:** None **DNS Records:** No forward resolution **Email Auth:** No SPF/DMARC configured **Control Plane:** \- DNSSEC: Valid \- Route Stability: False (0 changes in 30 days) \- DNSBL Listed: 1 of 8 lists \- Operator Score: 0.1304 (Minimal) \--- \## SUBNET ANALYSIS (136.144.43.0/24) **Total IPs:** 82 **Active IPs:** 25 **Threat IPs:** 3 **Abuse Density:** 0.0366 (3.66%) **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 21 \- Low Risk: 60 **Notable Neighbors:** \- 136.144.43.63: Risk Score 50 (Medium) \- 136.144.43.64: Risk Score 50 (Medium) \- 136.144.43.66: Risk Score 50 (Medium) \- 136.144.43.5: Risk Score 25 (Low) \--- \## OBSERVATION HISTORY **Total Signals:** 14 observations **Most Recent:** 2026-07-27 08:14:43 UTC **Temporal Analysis:** \- Ownership Changes: 0 \- Threat Persistence Days: 0 \- Persistently Malicious: No \- Threat Observation Count: 0 **Recent Signals:** 1. Port scanning activity detected (confidence: 70%) 2. Ownership verification checks (confidence: 85%) 3. Subnet abuse density analysis (confidence: 75%) 4. RIR/organization resolution (confidence: 90-95%) **Trend:** Stable. No escalation in threat indicators over observation period. \--- \## RELATIONSHIP GRAPH **Linked Entities:** 3 relationships detected \- All relationships: Same Network (DALLAS-US-136-144-43-0) \- No external hostname associations \- No organization/certificate links beyond network scope \--- \## RECOMMENDED ACTIONS **Risk Level:** LOW RISK **Firewall Policy:** Permissive / Monitor \- No blocking required based on current profile \- Standard logging recommended for network visibility **Detection Rules:** \- Monitor for service activation (ports opening) \- Watch for DNS query patterns \- Track for association with known malicious IPs **Mitigation Priority:** LOW No immediate blocking or containment actions warranted. \--- \## INTELLIGENCE NOTE This IP is classified as a consumer VPN endpoint. The /24 subnet shows typical residential VPN characteristics with low abuse density. The three threat siblings in the subnet represent isolated incidents. No correlation with active campaigns or known attacker infrastructure. SOC teams may safely allow traffic with standard logging, but should monitor for behavior changes indicating compromised host activity. \--- **END BRIEFING** **Intel Source:** IPDebrief **Classification:** Defensive Security Operations ## Nearby addresses - 136.144.43.5 (https://ipdebrief.com/136.144.43.5) - 136.144.43.8 (https://ipdebrief.com/136.144.43.8) - 136.144.43.15 (https://ipdebrief.com/136.144.43.15) - 136.144.43.22 (https://ipdebrief.com/136.144.43.22) - 136.144.43.63 (https://ipdebrief.com/136.144.43.63) - 136.144.43.64 (https://ipdebrief.com/136.144.43.64) - 136.144.43.65 (https://ipdebrief.com/136.144.43.65) - 136.144.43.66 (https://ipdebrief.com/136.144.43.66) - 136.144.43.67 (https://ipdebrief.com/136.144.43.67) - 136.144.43.68 (https://ipdebrief.com/136.144.43.68) - 136.144.43.69 (https://ipdebrief.com/136.144.43.69) - 136.144.43.70 (https://ipdebrief.com/136.144.43.70) --- Source: IPDebrief, "136.144.43.182 IP intelligence", https://ipdebrief.com/136.144.43.182, updated 2026-10-06. Assessments are probabilistic.