36.135.103.30📋 Copy

# IP Intelligence Briefing: 36.135.103.30

Classification: High Risk (Score: 80)

Date: June 2026

Analyst: IPDebrief Intelligence Division

---

## Executive Summary

IP address 36.135.103.30 is associated with China Mobile Group JiLin communications corporation (ASN 134810) in Jilin City, China. Despite the high-risk classification (80), the IP demonstrates minimal active threat indicators with no open services, zero blacklist hits, and a clean subnet environment. The IP is firewalled with no accessible services and shows stable ownership characteristics.

---

## Technical Profile

Ownership & Routing:

• ASN: 134810 (CMNET-JILIN-AS-AP)
• Organization: haijun li / China Mobile Group JiLin communications corporation
• CIDR Block: 36.128.0.0/10
• RIR: APNIC
• BGP Prefix: 36.135.64.0/18

Geolocation:

• Country: China (CN)
• Region: Jilin (JL)
• City: Jilin City
• Coordinates: 35.86°N, 104.2°E
• Accuracy Radius: 2500 km
• Geo Validation: Plausible (ICMP validation blocked)

---

## Risk Assessment

Risk Score: 80 (High Risk)

Operator Score: 0.1304 (Minimal)

Abuse Confidence: Not available

Blacklist Count: 0

DNSBL Status: Listed on 5 of 8 total lists

Key Indicators:

• Network Role: Provider/Infrastructure
• Services: No open ports detected (Firewalled / No Services)
• Not a Tor exit node, proxy, CDN, or hosting service
• Mobile carrier: Not applicable

---

## Threat Observations

Threat Profile:

• Known Campaigns: None
• Is Known Attacker: No
• Is Spam Source: No
• Tor Exit Node: No

Control Plane Analysis:

• Route Stability: Unstable
• MoAS: No
• Route Changes (30d): 0
• RPKI State: Not available
• DNSSEC Valid: Yes
• IRR Consistency: Not available

---

## Neighborhood Analysis

Subnet: 36.135.103.30/24

Abuse Density: 0 (Clean)

Total Siblings: 1

Active Siblings: 1

Threat Siblings: 0

Inherited Risk: 0

Classification: Clean

The /24 subnet shows minimal activity with no adjacent threat indicators, suggesting the IP operates in isolation within its network segment.

---

## Relationship Graph

Connected Entities: 25 relationships identified

• Primary association: CMNET network
• All relationships classified as "Same Network"
• No external hostname, certificate, or organization links detected

---

## Observation History

Total Observations: 19 signals tracked

Recent Activity:

• June 23, 2026: Operator score "Minimal" (raw score: 0)
• June 18, 2026: ASN 134810 confirmed, Jilin geolocation validated
• ICMP validation: Blocked (unable to validate)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

---

## Recommended Actions

Firewall Rules: No specific rules generated due to minimal operator score and clean subnet environment.

SOC Guidance:

• Monitor for service activation on previously firewalled ports
• Verify DNSBL listings for 5 blacklist sources
• Consider geolocation-based filtering if traffic patterns warrant
• Subnet 36.135.103.0/24 is clean; no lateral threat expansion detected

---

Intelligence Source: IPDebrief Platform

Confidence Level: High (multi-source validation)

Last Updated: June 23, 2026

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.