136.144.43.184📋 Copy

## THREAT INTELLIGENCE BRIEFING: 136.144.43.184/32

Date: 2026-07-27

Classification: Low Risk

Report ID: IP-20260727-13614443184

---

EXECUTIVE SUMMARY

IP address 136.144.43.184 is associated with VPN Consumer Dallas, United States of America (ASN 396356). Current risk assessment indicates Low Risk status with a risk score of 25/100. The IP presents no active threat indicators, no open services, and zero blacklist entries. Observed as a firewalled endpoint with no deployed services.

---

OWNERSHIP & GEOLOCATION

Note: Geolocation data shows conflicting indicators with NL coordinates but US organizational registration. Investigation recommended for location verification.

---

NETWORK CHARACTERISTICS

Network Classification:

• Open Ports: None detected
• TLS Certificate: Not deployed
• HTTP Banner: None
• DNS PTR Records: None
• Reverse DNS Resolution: Failed

Control Plane:

• Route Stability: Unstable
• DNSBL Listings: 1/8 lists (0.1304 operator score)
• RPKI State: Not verified
• Route Changes (30d): 0

Behavioral Indicators:

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Honeypot Hits: 0
• Enumeration Strikes: None

---

THREAT ASSESSMENT

Threat Indicators: None detected. No known campaigns, no certificate matches, zero correlated IPs in threat intelligence feeds.

---

SUBNET ANALYSIS (136.144.43.0/24)

Neighborhood Metrics:

• Total Siblings: 82 IPs
• Active Siblings: 25
• Threat Siblings: 3
• Abuse Density: 0.0366 (Low)
• Subnet Classification: Clean

Risk Distribution in Subnet:

• High Risk: 0
• Medium Risk: 21
• Low Risk: 60
• Clean: 60

Notable Neighbor IPs:

• 136.144.43.5 (Risk: 25)
• 136.144.43.63 (Risk: 50)
• 136.144.43.64 (Risk: 50)
• 136.144.43.65 (Risk: 0)
• 136.144.43.66 (Risk: 50)

---

OBSERVATION HISTORY

Signal Count: 13 observations

Key Historical Signals:

• Ownership changes: 0
• Threat persistence days: 0
• Recent geolocation: Republica de Panama (US) / NL conflict noted
• Abuse density consistency: 0.0366

Temporal Analysis:

• No persistent malicious activity detected
• No significant ownership changes
• Threat observation count remains at zero

---

RELATIONSHIP GRAPH

No external organizational or hostname relationships identified.

---

RECOMMENDED ACTIONS

Current Risk Level: Low

Firewall Recommendations:

• No immediate blocking required
• Standard monitoring advised
• No specific deny rules recommended

Monitoring Triggers:

• Monitor for service deployment
• Watch for DNS record creation
• Alert on outbound connection patterns
• Track subnet-level abuse density changes

Intelligence Priority: Medium-Low

---

CONCLUSION

IP 136.144.43.184 represents a low-risk endpoint associated with a consumer VPN service provider. No active threat indicators, no open services, and no malicious campaign associations detected. The subnet exhibits low abuse density with 60 clean IPs out of 82 total. Routine monitoring is recommended, with no immediate defensive actions required.

Analyst Notes: Geolocation discrepancies between US organizational registration and NL coordinates warrant periodic verification. Subnet-level threat siblings (3 of 82 IPs) may warrant expanded monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.