IP Intelligence Briefing: 149.143.96.45
Date: 2026-06-06
---
**1. Core Profile**
- Risk Score: 25 (Low Risk)
- Ownership:
- ASN: AS15542-MNT
- Organization: DFN-FTTH-Customers (ARIN-registered)
- Geolocation: Poortugaal, South Holland, Netherlands (52.13°N, 5.29°E)
- Threat Indicators: Clean. No malicious activity, spam, or known attacker associations detected.
- Network Role: Firewalled / No Services. No open ports or TLS/HTTP services identified.
---
**2. Observation History**
- Geolocation Consistency: Mixed. Recent inferences (June 6, 2026) show inferred location with 150km accuracy, but some records lack city/region details.
- Threat Persistence: No persistent malicious activity. Threat observation count: 1 (low impact).
- Subnet Stability: Subnet 149.143.96.0/24 has 1 active sibling, with 1 threat sibling. Abuse density: 1 (mostly clean).
---
**3. Relationships**
- DNS Associations:
- Linked to host-0j.abw-w1d3-b.v4.dfn.nl (DFN.nl domain).
- No email authentication (SPF/DKIM) records detected.
- Network Affiliation:
- Part of DFN-FTTH-Customers network (AS15542-MNT).
- No CDN, cloud, or mobile carrier associations.
---
**4. Neighborhood Analysis**
- Subnet: 149.143.96.0/24
- Neighbor Risk: No active neighbors reported. Subnet abuse density: 1 (mostly clean).
---
**5. Actionable Insights**
- No Immediate Threat: Low risk score and clean threat indicators suggest minimal immediate danger.
- Geolocation Discrepancies: Monitor geolocation inconsistencies (e.g., missing city details) for potential spoofing.
- Subnet Monitoring: Track 149.143.96.0/24 for changes in abuse density or new threat siblings.
Recommendation: No urgent action required. Maintain baseline monitoring for anomalies in geolocation or subnet activity.
---
*Generated by IPDebrief Threat Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | AS15542-MNT |
| ASN | AS15435 |
| Network Name | DFN-FTTH-Customers |
| CIDR Block | 149.143.64.0/18 |
| RIR | ARIN |
| Country | NL |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | host-0j.abw-w1d3-b.v4.dfn.nl |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | host-0j.abw-w1d3-b.v4.dfn.nl |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 19% | 1 | 2 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 31% | 2 | 2 |
| Overall | 23% | 9 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-12 21:54:01 UTC |
| Last Seen | 2026-06-06 14:49:46 UTC |
| Profile Built | 2026-06-06 15:29:39 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.