35.151.254.149📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 35.151.254.149/32

Classification: Moderate Risk Residential Endpoint

Date: Current

Source: IPDebrief Intelligence Platform

---

## EXECUTIVE SUMMARY

IP 35.151.254.149 is a residential endpoint associated with Charter Communications LLC (ASN 20115, CC04 network block 35.129.0.0/16). The IP carries a risk score of 50 (moderate) and is geolocated to Lawrenceville, GA, United States. No active threat indicators, known campaigns, or malicious reputation sources are associated with this address. The IP is listed on 2 of 8 DNSBLs but lacks specific abuse indicators.

---

## NETWORK ATTRIBUTES

---

## THREAT ASSESSMENT

• Risk Score: 50 (Moderate)
• Threat Indicators: None detected
• Known Campaigns: None
• Abuse Confidence Score: Not reported
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Blacklist Count: 0
• DNSBL Listed: 2 of 8 lists

---

## NEIGHBORHOOD ANALYSIS

Subnet: 35.151.254.149/24

Abuse Density: 0 (Low)

Total Siblings: 2

Active Siblings: 0

Threat Siblings: 0

Notable Neighbor: 35.151.254.19 (Risk Score: 25, Authority Score: 50)

The subnet demonstrates minimal abuse activity with no threat siblings detected.

---

## OBSERVATION HISTORY (17 Signals)

Recent signal observations indicate:

• Geolocation: US (confidence 0.35)
• Subnet Classification: Clean (confidence 0.40)
• Ownership Changes: None (confidence 0.85)
• Network Classification: Residential (confidence 0.40)
• Organization: Charter Communications LLC (confidence 0.90)
• Threat Persistence: 0 days (not persistently malicious)

The IP has exhibited consistent residential network characteristics with no significant behavioral changes observed.

---

## RELATIONSHIP GRAPH

• Same Network: CC04 (Charter Communications)
• DNS Associations: syn-035-151-254-149.res.spectrum.com

---

## CONTROL PLANE STATUS

• Origin ASN: 20115
• BGP Prefix: 35.151.248.0/21
• Route Stability: False
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not reported
• IRR Consistency: Not reported

---

## RECOMMENDED ACTIONS

Firewall Rules

iptables:

```bash

iptables -A INPUT -s 35.151.254.149 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 35.151.254.149 drop

```

nginx:

```nginx

deny 35.151.254.149;

```

pfSense:

```

35.151.254.149/32

```

Cloud Platforms

Cloudflare WAF:

```json

{

"description": "Block 35.151.254.149 — IPDebrief risk score 50",

"action": "block",

"filter": {

"expression": "ip.src eq 35.151.254.149"

}

}

```

AWS WAF:

```json

{

"Addresses": ["35.151.254.149/32"],

"Description": "IPDebrief risk 50"

}

```

---

## ANALYST NOTES

• This IP presents moderate risk primarily due to residential network classification and DNSBL listings common for residential addresses.
• No evidence of active malicious activity or association with known threat campaigns.
• The residential nature and lack of threat indicators suggest this IP may be a legitimate end-user address.
• Correlation with neighbor subnet 35.151.254.19 (risk score 25) shows consistent residential patterns.
• Route instability (isRouteStable: false) may indicate recent network provisioning changes.
• Recommended verification: Monitor for any behavioral changes or increased abuse signals over the next 30 days.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.