148.72.152.17📋 Copy

# IP INTELLIGENCE BRIEFING

IP Address: 148.72.152.17/32

Date: 2026-07-24

Classification: Low Risk Infrastructure

## EXECUTIVE SUMMARY

IP 148.72.152.17 is a low-risk infrastructure endpoint belonging to velia.net (ASN: 30083). The address shows no active threat indicators, with a risk score of 25/100. The IP is associated with hostname usgold1002.solucionesypunto.com and operates with no open services (firewalled/no services detected).

## OWNERSHIP AND NETWORK CLASSIFICATION

• Organization: velia.net
• Network: VIG-97 (148.72.152.0/23)
• ASN: 30083
• RIR: ARIN
• Registration: Historical data indicates stable ownership

## GEOLOCATION ANALYSIS

Geolocation sources show conflicting data:

• Primary consensus: Germany (DE) - 51.17°N, 10.45°E, timezone Europe/Berlin
• Alternative source: United States, St Louis, Missouri (38.6287°N, -90.1988°W)
• Assessment: Geolocation inconsistency typical for hosting infrastructure. Low confidence scores (0.35-0.70) on geolocation signals indicate uncertainty in precise location.

## THREAT INTELLIGENCE

• Risk Score: 25/100 (Low Risk)
• Blacklist Status: Listed on 1 of 8 DNSBLs (minor)
• Threat Indicators: None detected
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Campaign Associations: None identified
• Threat Persistence: No persistent malicious activity observed

## NETWORK BEHAVIOR

• Services: No open ports detected (Firewalled / No Services)
• TLS/HTTP: No active web services or certificates
• DNS Resolution: Forward confirmed to usgold1002.solucionesypunto.com
• Email Auth: SPF and DMARC records present
• Routing: Route stable, BGP prefix 148.72.152.0/24

## NEIGHBORHOOD ANALYSIS

• Subnet: 148.72.152.0/24
• Abuse Density: 0% (Clean)
• Total Siblings: 2
• Active Threat Siblings: 0
• Notable Neighbor: 148.72.152.65 (Risk Score: 0)

## OBSERVATION HISTORY

Sixteen observations recorded. Recent signals indicate:

• No ownership changes
• No threat persistence days
• Zero threat observation count
• Assessment: IP is not persistently malicious

## RELATIONSHIPS

• DNS Associations: usgold1002.solucionesypunto.com (primary hostname)
• Network Associations: VIG-97 (multiple references)

## RECOMMENDED ACTIONS

Monitoring: Continue passive monitoring. No blocking required.

Firewall: No specific rules needed. Standard allow/deny based on policy.

Threat Hunting: No indicators warrant aggressive investigation.

---

Analyst Notes: This IP represents benign infrastructure with minor DNSBL presence. The geolocation inconsistency warrants awareness but does not indicate malicious activity. Monitor for service activation or behavioral changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.