149.107.143.243📋 Copy

# IP Intelligence Briefing: 149.107.143.243/32

## Executive Summary

IP address 149.107.143.243 is classified as Low Risk with a risk score of 25. The address belongs to Epcan GmbH (AS196954) and is geolocated to Vreden, North Rhine-Westphalia, Germany. No malicious activity, threat indicators, or blacklist entries were detected. The subnet is classified as clean with zero abuse density.

---

## Ownership and Network Details

• Organization: Epcan GmbH
• Network Name: EPCAN-CGNT-NET-2
• ASN: 196954
• CIDR Block: 149.107.128.0/20
• RIR: ARIN
• Registration: No registration date available in profile

---

## Geolocation

• Country: Germany (DE)
• Region: North Rhine-Westphalia
• City: Vreden
• Accuracy Radius: 2500km
• Consensus: True (1 source)

*Note: Historical probes showed geographic inconsistencies with some probes indicating United States data, which is atypical for this ASN and may reflect routing anomalies or probe variance.*

---

## Threat Indicators

• Risk Score: 25 / 100
• Abuse Confidence Score: None
• Known Campaigns: None
• Threat Feeds: None
• Blacklist Count: 0
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False

---

## Network Role and Services

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• Infrastructure Type: None
• Cloud/CDN/VPN: False
• DNS Resolution: No PTR records, no forward resolution

---

## Neighborhood Analysis (149.107.143.0/24)

• Abuse Density: 0
• Classification: Clean
• Total Siblings: 4
• Active Siblings: 2
• Threat Siblings: 0
• Neighbor Risk Scores: All neighbors scored 25 (Low Risk)

Neighbors identified: 149.107.143.26, 149.107.143.79, 149.107.143.221

---

## Observation History

Total observations: 14

Recent activity includes:

• Traceroute probes (29 hops, target not reached)
• Geographic data inconsistencies across probes
• ASN data variance (some probes showing AS174 Cogent Communications)
• Subnet classified as clean with 0 abuse density in recent observations

---

## Recommended Actions

No security actions required. The IP address presents no threat indicators and is classified as low risk. No firewall rules or blocking recommendations are necessary based on current intelligence.

---

## Conclusion

This IP address represents legitimate corporate/ISP infrastructure with no evidence of malicious activity. The low risk score, clean subnet classification, and absence of threat indicators indicate this should be treated as benign traffic. No additional monitoring or defensive measures are warranted at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.