193.29.139.144📋 Copy

# INTELLIGENCE BRIEFING: 193.29.139.144/32

Classification: MODERATE RISK (Score: 40/100)

Date: July 2026

Analyst: IPDebrief Intelligence Platform

---

## EXECUTIVE SUMMARY

The target IP 193.29.139.144 is a Netherlands-based single-service host under GREENHOST (ASN 47172) exhibiting moderate risk characteristics. The IP shows no active threat indicators but is listed on 2 of 8 DNSBLs with no current blacklisting. The subnet demonstrates moderate abuse density with 18 medium-risk neighbors out of 27 total siblings.

---

## OWNERSHIP & GEOLOCATION

---

## THREAT ASSESSMENT

Current Risk Profile:

• Risk Score: 40 (Moderate)
• Abuse Confidence Score: N/A
• Blacklist Count: 0
• DNSBL Listings: 2 of 8 total lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Threat Indicators: None detected in current profile. No known campaigns or threat feeds associated.

---

## NETWORK BEHAVIOR

Open Services:

• Port 8080/tcp (http-alt)

DNS Configuration:

• Forward Resolution: Not confirmed
• PTR Records: None
• Hosted Domains: 0
• Email Auth (SPF/DMARC): Not configured
• DNSSEC: Valid

Control Plane:

• Route Stability: False
• Operator Score: 0.1304 (Minimal)
• Route Changes (30d): 0
• MOAS: No

---

## OBSERVATION HISTORY (13 Signals)

Recent temporal analysis reveals:

• 2026-07-27 21:29:30 UTC: Geolocation signals from NL (confidence: 0.52)
• 2026-07-27 21:28:09 UTC: ASN 47172 / GREENHOST attribution (confidence: 0.90-0.95)
• 2026-07-27 21:27:59 UTC: AlienVault OTX signal with threats (confidence: 0.75)

Notable: GeoPlausible validation failed (false). Some signal inconsistency detected across sources.

---

## SUBNET ANALYSIS (193.29.139.0/24)

Neighborhood Statistics:

• Total Neighbors: 27
• Abuse Density: 0
• Risk Distribution:

- High Risk: 0

- Medium Risk: 18

- Low Risk: 9

High-Risk Neighbor IPs (Score ≥ 40):

193.29.139.132, .136, .139, .143, .147, .151, .152, .167, .168, .171, .173, .179, .184, .198, .203, .205, .206, .231, .234, .235, .236, .249, .251

Multiple high-risk neighbors suggest this is a hosting environment with variable tenant risk profiles.

---

## RELATIONSHIPS

• Same Network: NL-GREENHOST (2 relationships)
• No certificate or hostname associations detected

---

## RECOMMENDED ACTIONS

Immediate Mitigation Rules:

---

## ANALYST NOTES

Positive Indicators:

• No active threat indicators
• No known campaigns
• No Tor exit or proxy classification
• Single-service host architecture

Concerns:

• DNSBL listings on 2 of 8 lists
• Route stability flag false
• AlienVault OTX showing threat associations
• Neighborhood contains 18 medium-risk IPs
• GeoPlausible validation failed

Recommended Monitoring: Maintain watchlist status due to DNSBL listings and neighborhood risk profile. Consider broader subnet-level blocking if operational requirements permit.

---

*Generated by IPDebrief Intelligence Platform — All data sourced from real-time network intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.