47.197.248.18📋 Copy

IP INTELLIGENCE BRIEFING: 47.197.248.18/32

Classification: LOW RISK

1. EXECUTIVE SUMMARY

IP 47.197.248.18 presents a low-risk profile (risk score: 25) associated with Frontier Communications Corporation (ASN: 5650). The address is classified as firewalled with no active services, operating from the US (Florida). No active threat indicators, malware campaigns, or blacklist entries were observed.

2. OWNERSHIP & NETWORK ATTRIBUTES

• ASN: 5650 (Frontier Communications Corporation)
• Network: 47.192.0.0/12
• Geolocation: United States, Florida, Plant City (coordinates unreliable)
• PTR Record: 47-197-248-18.fdr01.srst.fl.ip.frontiernet.net
• DNS Domain: frontiernet.net

3. THREAT INDICATORS

• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Campaign Correlation: No correlated IPs or certificate matches

4. NETWORK ROLE

• Service Status: Firewalled / No Services
• Cloud/CDN/VPN: No
• Hosting/Proxy/Residential: No
• Bogon: No
• Anycast: No

5. OBSERVATION HISTORY

Eighteen historical observations recorded. Signals indicate minimal activity with one residential classification event detected. Recent routing signals reference multiple organizational assignments (Frontier Communications Corporation and Verizon Business), suggesting potential network reassignments.

6. NEIGHBORHOOD ANALYSIS

• Subnet: 47.197.248.18/24
• Abuse Density: 1
• Classification: mostly_clean
• Threat Siblings: 1
• Active Siblings: 0

7. CONTROL PLANE DATA

• Origin ASN: 5650
• Route Stability: Unstable
• DNSSEC: Valid
• DNSBL Listings: 1 of 8 total lists

8. SECURITY RECOMMENDATIONS

No specific firewall rules or blocking actions recommended at this time. The low risk score (25) and absence of threat indicators suggest standard monitoring is adequate. However, the unstable route and geolocation validation issues warrant continued observation.

9. ACTIONABLE INTELLIGENCE

• Monitor: Route stability and geolocation validation discrepancies
• Correlate: One threat sibling identified in adjacent subnet
• Block: No immediate action required; maintain standard logging

ANALYST NOTES

The IP demonstrates typical residential/ISP characteristics with no malicious activity detected. Geolocation data shows validation failures (RTT inconsistencies), suggesting the recorded location may be inaccurate. Continued monitoring of route stability and neighborhood activity is recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.