# 147.90.209.49 — IP Intelligence Summary

147.90.209.49 is an IPv4 address operated by VPN Consumer Frankfurt, Germany (AS212238), geolocated to Frankfurt am Main, Germany. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/147.90.209.49
- Last updated: 2026-10-06

## Ownership

- Organization: VPN Consumer Frankfurt, Germany
- Network name: FRANKFURT-AM-MAIN-DE-147-90-209-0
- Allocated block: 147.90.209.0/24
- ASN: AS212238 (https://ipdebrief.com/asn/212238)
- Regional registry: ARIN

## Location

- City: Frankfurt am Main
- Region: Hesse
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP INTELLIGENCE BRIEFING: 147.90.209.49/32

**Classification:** LOW RISK — Passive Infrastructure

**Report Date:** 2026-07-28

**Data Source:** IPDebrief Intelligence Platform

\### EXECUTIVE SUMMARY

IP 147.90.209.49 is a low-risk residential IP address assigned to VPN Consumer Frankfurt, Germany. The address shows no active threat indicators, maintains a clean security reputation, and exhibits stable network characteristics. No immediate defensive action required.

\### OWNERSHIP AND GEOLOCATION

\- **ASN:** 212238

\- **Organization:** VPN Consumer Frankfurt, Germany

\- **Network Block:** 147.90.209.0/24 (FRANKFURT-AM-MAIN-DE-147-90-209-0)

\- **Location:** Frankfurt am Main, Hesse, Germany (DE)

\- **Coordinates:** 51.62°N, 8.04°E

\- **Timezone:** Europe/Berlin

\### RISK ASSESSMENT

\- **Overall Risk Score:** 0/100

\- **Provider Score:** 0/100

\- **Authority Score:** 0/100

\- **Stability Score:** 0/100

\- **Reputation:** Low Risk

\- **Abuse Confidence Score:** Not applicable (no threat indicators)

\### THREAT INDICATORS

No active threat indicators detected:

\- **Blacklist Count:** 0

\- **Known Campaigns:** None

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Threat Feeds:** Empty

\### NETWORK CHARACTERISTICS

\- **Service Classification:** Firewalled / No Services

\- **Open Ports:** None detected

\- **Infrastructure Type:** Not CDN, Cloud, Proxy, Hosting, or Mobile

\- **Connection Type:** Residential/Consumer VPN

\- **DNS Resolution:** None active (no PTR records, no forward resolution)

\- **Email Authentication:** No SPF/DMARC records

\- **HTTP Services:** Not responding to web probes

\### CONTROL PLANE AND ROUTING

\- **BGP Prefix:** 147.90.209.0/24

\- **Route Stability:** Unstable

\- **RPKI State:** Not validated

\- **IRR Consistency:** Not verified

\- **DNSSEC:** Valid

\- **Operator Score:** 0.1304 (Minimal)

\- **MoAS Status:** False

\### NETWORK NEIGHBORHOOD ANALYSIS

**Subnet:** 147.90.209.0/24

\- **Total Siblings:** 36 IPs

\- **Active Siblings:** 13

\- **Threat Siblings:** 1

\- **Abuse Density:** 0.0278 (2.78%)

\- **Subnet Classification:** Clean

**Risk Distribution in Subnet:**

\- High Risk: 0 IPs

\- Medium Risk: 0 IPs

\- Low Risk: 33 IPs

\### OBSERVATION HISTORY

Total observations: 16 signals collected

\- **Geolocation Signals:** Consistent Frankfurt, Germany attribution

\- **Ownership Signals:** No changes recorded

\- **Network Classification:** Persistent clean classification

\- **Threat Persistence:** None observed

\- **Signal Confidence:** 0.30–0.85

**Temporal Analysis:**

\- Ownership Changes: 0

\- Threat Observation Count: 0

\- Is Persistently Malicious: No

\- Threat Persistence Days: 0

\### RELATIONSHIPS

The IP maintains network-level relationships only:

\- 5 relationships identified, all indicating membership in FRANKFURT-AM-MAIN-DE-147-90-209-0 network block

\- No organizational, hostname, or certificate relationships detected

\### ACTIONABLE INTELLIGENCE

**For SOC Analysts:**

1. **Monitor Status:** No immediate action required; IP maintains clean profile

2. **Network Context:** Part of consumer VPN infrastructure in Frankfurt

3. **Subnet Health:** Low abuse density (2.78%) with minimal threat representation

4. **Historical Trend:** Stable with no escalation in risk indicators

**Recommended Actions:** None — IP is low-risk and shows no malicious behavior

\### RECOMMENDED BLOCKING/ALLOWING

**Firewall Rule:** Not required for this IP

**Block Score:** 0/100 (no blocking recommended)

**Allow Score:** N/A (no services exposed)

\---

*End of Intelligence Briefing*

## Nearby addresses

- 147.90.209.5 (https://ipdebrief.com/147.90.209.5)
- 147.90.209.6 (https://ipdebrief.com/147.90.209.6)
- 147.90.209.8 (https://ipdebrief.com/147.90.209.8)
- 147.90.209.12 (https://ipdebrief.com/147.90.209.12)
- 147.90.209.15 (https://ipdebrief.com/147.90.209.15)
- 147.90.209.20 (https://ipdebrief.com/147.90.209.20)
- 147.90.209.22 (https://ipdebrief.com/147.90.209.22)
- 147.90.209.23 (https://ipdebrief.com/147.90.209.23)
- 147.90.209.29 (https://ipdebrief.com/147.90.209.29)
- 147.90.209.30 (https://ipdebrief.com/147.90.209.30)
- 147.90.209.31 (https://ipdebrief.com/147.90.209.31)
- 147.90.209.32 (https://ipdebrief.com/147.90.209.32)

---

Source: IPDebrief, "147.90.209.49 IP intelligence", https://ipdebrief.com/147.90.209.49, updated 2026-10-06. Assessments are probabilistic.