## IP INTELLIGENCE BRIEFING: 146.70.117.46/32
Classification: Moderate Risk (50/100) | Date: 2026-07-30
Ownership & Network Context
The IP address 146.70.117.46 is registered to GLOBALAXS NOC (ASN 9009) under the M247-LTD-Frankfurt network block (146.70.117.0/24). RIR registration falls under ARIN with abuse contact available via RDAP. The network is geolocated to Manchester, DE (Germany) with moderate geolocation confidence.
Threat Assessment
Current threat indicators show no active malicious activity:
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0
- Known Campaigns: None detected
The IP carries 2 DNSBL listings across 8 total lists, indicating minor reputation friction. Risk score of 50 reflects moderate caution warranted but does not indicate active compromise.
Network Role & Services
Service classification: Firewalled / No Services
- No open ports detected
- No TLS certificates or HTTP services active
- No DNS reverse resolution (PTR hostnames: none)
- Email authentication records absent (no SPF/DMARC)
Neighborhood Analysis
The /24 subnet (146.70.117.0/24) contains 6 neighboring IPs with an abuse density of 0. Risk distribution:
- High Risk: 0
- Medium Risk: 1 (146.70.117.70 @ 40)
- Low Risk: 5 (146.70.117.80, 146.70.117.92, 146.70.117.179, 146.70.117.204, 146.70.117.236)
Historical Observations
Nine signal observations recorded, with the most recent from 2026-07-30. Historical data confirms consistent ownership under GLOBALAXS NOC with stable ASN 9009. No significant threat persistence indicators or ownership changes detected.
Control Plane & Routing
- Route Stability: False
- RPKI State: Not verified
- Route Changes (30d): 0
- DNSSEC: Valid
- Operator Score: 0.1304 (Minimal)
Recommended Actions
No specific firewall rules or blocking actions recommended. The IP presents moderate risk with no active threat indicators. Monitor for service activation if this IP becomes newly active on your infrastructure.
---
Analyst Notes: This IP belongs to a legitimate hosting network (M247/GLOBALAXS). The moderate risk score derives from DNSBL listings rather than active threat indicators. No immediate blocking required; standard monitoring applies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | GLOBALAXS NOC |
| ASN | AS9009 |
| Network Name | M247-LTD-Frankfurt |
| CIDR Block | 146.70.117.0/24 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-29 22:49:37 UTC |
| Last Seen | 2026-08-01 01:41:34 UTC |
| Profile Built | 2026-07-30 23:53:03 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.