72.249.204.126📋 Copy

# IP Intelligence Briefing: 72.249.204.126/32

Date: 2026-07-25

Classification: Low Risk Infrastructure

Analyst: IPDebrief SOC

---

## Executive Summary

IP 72.249.204.126 is a low-risk infrastructure address belonging to GTT Communications Inc. (ASN 979). The address demonstrates minimal threat indicators, clean subnet classification, and no active malicious behavior. Risk score: 15/100. No immediate security action required.

---

## Profile Analysis

Ownership & Classification:

• Organization: GTT Communications Inc.
• ASN: 979 (GTT)
• CIDR Block: 72.249.200.0/21
• Network Type: Tier-1 Internet Service Provider
• RIR: ARIN

Geolocation:

• Country: United States
• State: Georgia (GA)
• City: Atlanta
• Timezone: America/New_York

Threat Indicators:

• Risk Score: 15 (Low Risk)
• Abuse Confidence Score: Not available
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0 (0% of feeds)

Network Services:

• Open Ports: None detected
• Service Status: Firewalled / No Services
• DNS Records: No PTR hostnames, no forward resolution
• DNSBL Listings: 1 of 8 total lists

---

## Historical Observations

Observation Count: 12 signals recorded

Temporal Analysis:

• Ownership Changes: 0 (Stable)
• Threat Persistence Days: 0
• Persistently Malicious: False

Notable Anomalies:

• Geographic discrepancy detected in historical signals. Recent observations (2026-07-25 18:14:30) report Atlanta, GA. Earlier signals (2026-07-25 18:09:47) reported Los Angeles, CA. This may indicate CDN routing or multi-point presence.
• All other signals show consistent provider and network classification.

---

## Relationship Graph

Connected Entities: 2 relationships identified

• Same Network: GTT (GTT Communications)
• Same Network: GTT (GTT Communications)

No connections to external organizations, hostnames, or certificates detected.

---

## Neighborhood Analysis (72.249.204.0/24)

Subnet Classification: Clean

Abuse Density: 0

Neighbor Count: 0

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 0

Sibling Analysis:

• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

The /24 subnet shows no inherited risk and no neighboring threat activity.

---

## Recommended Actions

Current Risk Level: Low (15/100)

No firewall rules or blocking recommendations generated.

Monitoring Recommendations:

• Continue passive monitoring due to low risk profile
• Investigate geographic discrepancy if operational context requires precise location
• Monitor for DNSBL listing expansion

---

## Intelligence Assessment

This IP address represents legitimate infrastructure owned by a major Tier-1 provider (GTT Communications). The combination of low risk score, clean subnet classification, absence of threat indicators, and stable ownership profile indicates normal operational use. No evidence of malicious activity, command-and-control infrastructure, or exploitation attempts.

Threat Level: None

Recommended Action: No action required. Continue standard monitoring.

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.