## IPDEBRIEF INTELLIGENCE BRIEFING
Subject: 147.90.234.133/32
Date: Current
Classification: Moderate Risk (Score: 55/100)
---
EXECUTIVE SUMMARY
IP 147.90.234.133 is a residential endpoint assigned to Fourplex Telecom LLC (ASN 27284) within CIDR block 147.90.234.0/23. The IP presents a moderate risk profile with no active threat indicators, but exhibits elevated risk due to neighborhood abuse density. The IP is classified as residential infrastructure with no detected open ports, TLS certificates, or reverse DNS records.
---
NETWORK ATTRIBUTES
| Attribute | Value |
|---|---|
| **ASN** | 27284 (Fourplex Telecom LLC) |
| **Organization** | Fourplex Telecom LLC abuse handling |
| **CIDR Block** | 147.90.234.0/23 |
| **Geolocation** | NL (Netherlands) / 52.13, 5.29 |
| **Network Role** | Residential Endpoint |
| **Risk Score** | 55 (Moderate) |
| **DNSBL Listings** | 3 of 8 total lists |
---
THREAT INDICATORS
- Threat Classification: No active threat indicators detected
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Blacklist Count: 0
- Campaign Associations: None detected
Note: IP appears in 3 DNSBL entries; requires correlation with internal threat feeds.
---
NEIGHBORHOOD ANALYSIS (147.90.234.0/24)
The /24 subnet contains 13 sibling IPs with elevated abuse activity:
- Abuse Density: 0.1429 (moderate)
- Risk Distribution: 11 medium, 2 low, 0 high
- Active Siblings: 10 of 14 total
- Threat Siblings: 2
Notable Neighbors:
- 147.90.234.167: Risk Score 59 (elevated)
- Multiple IPs (30, 34, 43, 63, 88, 115, 116, 117, 118, 159, 213, 214): Risk Score 49
The subnet shows persistent activity with residential infrastructure.
---
OBSERVATION HISTORY
13 observations recorded with the following patterns:
- Recent classification: "mostly_clean" with inherited risk of 4
- Network classification consistently identifies as residential
- Inconsistent geolocation data (profiles show NL, some historical data shows US)
- Route stability: False (indicates dynamic routing behavior)
- No persistent malicious behavior detected (threatPersistenceDays: 0)
---
RELATIONSHIP GRAPH
- Same Network: FOURPL-147-90-234-0 (1 relationship)
- No organizational or certificate relationships detected
---
RECOMMENDED ACTIONS
Severity: High
Immediate Actions:
1. Block at Perimeter: Implement firewall rules to drop traffic from 147.90.234.133
2. Increase Logging: Review recent activity and correlate with internal threat indicators
3. Subnet Monitoring: Monitor 147.90.234.0/24 for related activity due to neighborhood abuse density
Firewall Rules:
- iptables: `iptables -A INPUT -s 147.90.234.133 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 147.90.234.133 drop`
- nginx: `deny 147.90.234.133;`
- Cloudflare WAF: Block via expression `ip.src eq 147.90.234.133`
- AWS WAF: Block CIDR `147.90.234.133/32`
---
INTELLIGENCE NOTES
- The moderate risk score (55) with 3 DNSBL listings suggests reputation issues despite lack of direct threat indicators
- Residential classification may indicate legitimate use or opportunistic exploitation
- Neighborhood abuse density warrants monitoring of related IPs, particularly 147.90.234.167 (score 59)
- Route instability suggests dynamic infrastructure; may indicate hosting or proxy usage
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Fourplex Telecom LLC abuse handling |
| ASN | AS27284 |
| Network Name | FOURPL-147-90-234-0 |
| CIDR Block | 147.90.234.0/23 |
| RIR | ARIN |
| Country | US |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS27284 |
| Network Prefix | 147.90.234.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 19:10:42 UTC |
| Last Seen | 2026-08-26 23:37:52 UTC |
| Profile Built | 2026-08-29 07:01:38 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 17 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 147.90.234.133
Who owns the IP address 147.90.234.133?
147.90.234.133 is registered to Fourplex Telecom LLC abuse handling. The address falls within the 147.90.234.0/23 network block. Registration is held at ARIN.
Where is 147.90.234.133 located?
Geolocation data places 147.90.234.133 in New York, New York, Netherlands. The local time zone is Europe/Amsterdam. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 147.90.234.133 malicious or safe?
147.90.234.133 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 147.90.234.133 a VPN, proxy, or data center address?
147.90.234.133 is classified as a residential network based on network ownership and behavioural analysis.