147.90.209.60📋 Copy

# IP Intelligence Briefing: 147.90.209.60/32

## Executive Summary

IP address 147.90.209.60 is a low-risk residential/proxy endpoint located in Frankfurt am Main, Germany. The address belongs to ASN 212238 (VPN Consumer Frankfurt) and exhibits minimal threat indicators. No active malicious campaigns or known attacker signatures were observed. The subnet demonstrates low abuse density with predominantly low-risk neighbors.

## Technical Profile

Ownership & Classification:

• ASN: 212238
• Organization: VPN Consumer Frankfurt, Germany
• Network Block: 147.90.209.0/24
• Network Role: Firewalled / No Services
• Provider Score: 0.00
• Authority Score: 0.00

Geolocation:

• Country: Germany (DE)
• Region: Hesse
• City: Frankfurt am Main
• Coordinates: 51.62°N, 8.04°E
• Geo Confidence: Consensus verified across multiple sources

Threat Indicators:

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• Abuse Confidence Score: Not applicable
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No

## Network Services Assessment

No active services were detected on 147.90.209.60:

• Open Ports: None
• TLS Certificate: Not present
• HTTP Banner: Not detected
• DNS Records: No PTR hostnames; no forward resolution confirmed
• Email Authentication: No SPF or DMARC records
• Hosted Domains: None

## Control Plane Analysis

Routing & BGP:

• Origin ASN: 212238
• BGP Prefix: 147.90.209.0/24
• Route Stability: False (inconsistent routing history)
• RPKI State: Not verified
• IRR Consistency: Not verified

DNS Security:

• DNSSEC Valid: Yes
• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)

## Temporal Behavior

Ownership History:

• Ownership changes: 0
• Average ownership duration: Not applicable
• Threat persistence days: 0
• Persistently Malicious: No
• Threat Observation Count: 0

## Neighborhood Analysis (147.90.209.0/24)

Subnet Statistics:

• Total Siblings: 32
• Abuse Density: 0.00 (Clean)
• Classification: Clean

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 20
• No Risk: 12

Notable Neighbors:

Several adjacent addresses in the /24 block also show a risk score of 25, including:

• 147.90.209.30, 147.90.209.39, 147.90.209.44, 147.90.209.54, 147.90.209.71, 147.90.209.98, 147.90.209.118, 147.90.209.190, 147.90.209.247, 147.90.209.251

This indicates the risk score may be associated with the network provider's classification rather than specific endpoint behavior.

## Observation History

Signal Count: 13 observations recorded

Recent Signals (2026-07-24):

1. Ownership Signal: No changes detected; confidence 0.85

2. Geolocation Signal: Country DE (Frankfurt am Main); confidence 0.40

3. Geolocation Signal: Frankfurt am Main, Hesse, Germany via MaxMind GeoLite2; confidence 0.70

4. Operator Score: Minimal (0.1304); confidence 0.30

5. Overall Profile: 5 of 6 dimensions covered; confidence 0.22

No escalation in threat signals observed. The IP has maintained consistent characteristics throughout the observation window with no evidence of malicious transformation.

## Relationships

Connected Entities:

• Same Network: FRANKFURT-AM-MAIN-DE-147-90-209-0 (2 entries)

The relationship graph is limited, reflecting the IP's classification as a consumer/proxy endpoint with no significant associations to other malicious entities, hostnames, or organizations.

## Recommended Actions

Based on the low-risk profile and absence of active threat indicators, no immediate blocking or mitigation actions are required. The IP may be permitted through standard firewall policies with the following considerations:

1. Allow Standard Traffic: No restrictions needed for this IP

2. Monitor for Change: Track any future risk score increases

3. Subnet Context: The /24 block shows minimal abuse density; neighbor IPs share similar risk profiles

4. Geolocation Context: Frankfurt-based residential/proxy endpoint with established provider infrastructure

## Conclusion

IP 147.90.209.60 is a low-risk endpoint with no observed malicious behavior. The address belongs to a legitimate VPN consumer network in Frankfurt, Germany, with stable ownership and no persistent threat activity. The surrounding subnet demonstrates consistent low-risk characteristics. SOC teams may treat this address as benign with standard network monitoring applied.

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.