192.236.225.48📋 Copy

# IP Intelligence Briefing: 192.236.225.48/32

## Executive Summary

IP address 192.236.225.48 is classified as Low Risk (Risk Score: 25) and presents minimal threat indicators. The address is registered to CENTRIOHOST-LLC (ASN 36352) within the Hostwinds colocation hosting infrastructure. No active malicious campaigns, blacklist entries, or known attacker signatures were observed.

## Ownership and Infrastructure

• Organization: CENTRIOHOST-LLC
• Network: CC-192-236-225-0-25 (192.236.225.0/25)
• ASN: 36352
• Provider: Hostwinds
• Infrastructure Type: Colocation Hosting
• Registration: ARIN

## Geolocation and Validation

The IP resolves to United States geolocation data. However, geo-validation flagged implausible positioning with an RTT violation: observed round-trip time of 81.0ms is below the minimum possible 152.5ms required for the claimed distance of 7,626km, suggesting location spoofing or inaccurate geolocation data.

## Network Classification

• Primary Role: Hosting provider infrastructure
• DNS Classification: Clean
• Subnet Abuse Density: 0 (clean)
• ISP/CDN/Proxy: No indicators detected
• Tor/VPN: Negative

## DNS and Hostnames

• PTR Record: tec8904.smarktrd.com
• Forward Resolution: Confirmed (1 hostname)
• Domain: smarktrd.com
• Email Authentication: SPF record present; DMARC absent
• Hosted Domains: None detected

## Services and Ports

• Open Ports: TCP/22 (SSH)
• SSH Banner: OpenSSH 9.9
• HTTP/TLS: No active web services detected

## Threat Indicators

• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Campaigns: None
• Spam Source: No
• Known Attacker: No
• Tor Exit Node: No

## Control Plane Data

• BGP Prefix: 192.236.225.0/24
• DNSSEC: Valid
• DNSBL Listed: 1 of 8 total lists
• Route Stability: Not stable
• IRR Consistency: Not assessed

## Neighborhood Analysis

The /24 subnet (192.236.225.0/24) contains 2 total sibling IPs with 1 currently active:

• Neighbor: 192.236.225.165 (Risk Score: 25, Authority Score: 50)
• Threat Siblings: 0
• Overall Subnet Classification: Clean

## Historical Observations

21 total observations recorded. No persistent malicious activity detected. Recent signals show no campaign correlations or threat persistence.

## Recommended Actions

No specific firewall rules or blocking recommendations were generated. The IP presents as low-risk infrastructure with no actionable threat indicators.

---

Classification: Low Risk

Last Updated: Current session

Analyst Notes: Monitor for any changes in threat indicators given the hosting infrastructure classification. Geo-validation discrepancies warrant periodic re-validation if this IP becomes a point of interest for traffic analysis.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.