147.90.209.49📋 Copy

## IP INTELLIGENCE BRIEFING: 147.90.209.49/32

Classification: LOW RISK — Passive Infrastructure

Report Date: 2026-07-28

Data Source: IPDebrief Intelligence Platform

EXECUTIVE SUMMARY

IP 147.90.209.49 is a low-risk residential IP address assigned to VPN Consumer Frankfurt, Germany. The address shows no active threat indicators, maintains a clean security reputation, and exhibits stable network characteristics. No immediate defensive action required.

OWNERSHIP AND GEOLOCATION

• ASN: 212238
• Organization: VPN Consumer Frankfurt, Germany
• Network Block: 147.90.209.0/24 (FRANKFURT-AM-MAIN-DE-147-90-209-0)
• Location: Frankfurt am Main, Hesse, Germany (DE)
• Coordinates: 51.62°N, 8.04°E
• Timezone: Europe/Berlin

RISK ASSESSMENT

• Overall Risk Score: 0/100
• Provider Score: 0/100
• Authority Score: 0/100
• Stability Score: 0/100
• Reputation: Low Risk
• Abuse Confidence Score: Not applicable (no threat indicators)

THREAT INDICATORS

No active threat indicators detected:

• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: Empty

NETWORK CHARACTERISTICS

• Service Classification: Firewalled / No Services
• Open Ports: None detected
• Infrastructure Type: Not CDN, Cloud, Proxy, Hosting, or Mobile
• Connection Type: Residential/Consumer VPN
• DNS Resolution: None active (no PTR records, no forward resolution)
• Email Authentication: No SPF/DMARC records
• HTTP Services: Not responding to web probes

CONTROL PLANE AND ROUTING

• BGP Prefix: 147.90.209.0/24
• Route Stability: Unstable
• RPKI State: Not validated
• IRR Consistency: Not verified
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)
• MoAS Status: False

NETWORK NEIGHBORHOOD ANALYSIS

Subnet: 147.90.209.0/24

• Total Siblings: 36 IPs
• Active Siblings: 13
• Threat Siblings: 1
• Abuse Density: 0.0278 (2.78%)
• Subnet Classification: Clean

Risk Distribution in Subnet:

• High Risk: 0 IPs
• Medium Risk: 0 IPs
• Low Risk: 33 IPs

OBSERVATION HISTORY

Total observations: 16 signals collected

• Geolocation Signals: Consistent Frankfurt, Germany attribution
• Ownership Signals: No changes recorded
• Network Classification: Persistent clean classification
• Threat Persistence: None observed
• Signal Confidence: 0.30–0.85

Temporal Analysis:

• Ownership Changes: 0
• Threat Observation Count: 0
• Is Persistently Malicious: No
• Threat Persistence Days: 0

RELATIONSHIPS

The IP maintains network-level relationships only:

• 5 relationships identified, all indicating membership in FRANKFURT-AM-MAIN-DE-147-90-209-0 network block
• No organizational, hostname, or certificate relationships detected

ACTIONABLE INTELLIGENCE

For SOC Analysts:

1. Monitor Status: No immediate action required; IP maintains clean profile

2. Network Context: Part of consumer VPN infrastructure in Frankfurt

3. Subnet Health: Low abuse density (2.78%) with minimal threat representation

4. Historical Trend: Stable with no escalation in risk indicators

Recommended Actions: None — IP is low-risk and shows no malicious behavior

RECOMMENDED BLOCKING/ALLOWING

Firewall Rule: Not required for this IP

Block Score: 0/100 (no blocking recommended)

Allow Score: N/A (no services exposed)

---

*End of Intelligence Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.