# 192.248.150.180 — IP Intelligence Summary 192.248.150.180 is an IPv4 address operated by MAINT-AS20473 (AS20473), geolocated to Canary Wharf, United Kingdom. It belongs to datacenter or hosting infrastructure with reverse DNS name 192.248.150.180.vultrusercontent.com. As of October 30, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/192.248.150.180 - Last updated: 2026-10-30 ## Ownership - Organization: MAINT-AS20473 - Network name: NET-V4-192-248-128-0-18 - Allocated block: 192.248.150.0/23 - ASN: AS20473 (https://ipdebrief.com/asn/20473) - Regional registry: ARIN - Cloud / hosting provider: Vultr ## Location - City: Canary Wharf - Region: England - Country: United Kingdom - Time zone: Europe/London ## Network classification - Infrastructure type: CloudCompute - Datacenter / hosting: yes - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: High Risk (80/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - 192.248.150.180.vultrusercontent.com - Forward-confirmed: no ## Analyst narrative \# IPDEBRIEF INTELLIGENCE BRIEFING **Target IP:** 192.248.150.180/32 **Briefing Date:** 2026-08-05 **Risk Classification:** MODERATE RISK (Score: 55/100) \--- \## EXECUTIVE SUMMARY IP 192.248.150.180 is a cloud infrastructure address operated by Vultr (ASN 20473) with moderate risk characteristics. The IP is hosted in Canary Wharf, England, and exhibits cloud computing infrastructure patterns. While no active malicious indicators were detected, the IP shows 3 DNSBL listings out of 8 queried lists, warranting monitoring and consideration for defensive blocking. \--- \## INFRASTRUCTURE PROFILE **Ownership & Network:** \- ASN: 20473 (MAINT-AS20473) \- Organization: NET-V4-192-248-128-0-18 \- CIDR Block: 192.248.150.0/23 \- Provider: Vultr (CloudCompute) \- Infrastructure Type: Hosting/Cloud **Geolocation:** \- Country: United Kingdom (GB) \- Region: England \- City: Canary Wharf \- Accuracy: 750km radius (multi-signal inference) \- GeoConsensus: Validated across multiple sources **Network Role:** \- Cloud Provider: YES \- Hosting Service: YES \- CDN/VPN/Proxy/Tor: NO \- Bogon Address: NO \- Anycast Deployment: NO \--- \## THREAT INDICATORS **Current Threat Status:** CLEAN \- Known Attacker: NO \- Spam Source: NO \- Tor Exit Node: NO \- Active Campaigns: NONE \- Abuse Confidence Score: NULL **Blacklist Status:** \- DNSBL Listings: 3 of 8 total lists \- Blacklist Count: 0 (IP-level) \- Pulsedive Risk: NOT SCORED **Service Exposure:** \- Open Ports: NONE DETECTED \- TLS Certificates: NONE \- HTTP Banner: NONE \- Service Purpose: Firewalled / No Services \--- \## OBSERVATION HISTORY (21 SIGNALS) **Timeline:** Most recent observation 2026-08-05 **Key Historical Signals:** \- Geographic location consistently inferred as GB (confidence: 0.28-0.85) \- Traceroute: 30 hops (ICMP blocked - unable to validate) \- BGP prefix: 192.248.144.0/20 (consistent) \- Ownership changes: 0 (stable) \- Threat persistence days: 0 \- Persistently malicious: NO **Temporal Assessment:** \- Threat observation count: 1 \- Ownership stability: HIGH \- Route stability: FALSE (0 route changes in 30d) \--- \## NETWORK RELATIONSHIPS **DNS Associations:** \- PTR Hostname: 192.248.150.180.vultrusercontent.com \- Forward Resolution: 1 hostname \- SPF/DMARC: Records present (email authentication configured) **Network Relationships:** \- Same Network: NET-V4-192-248-128-0-18 (multiple entries) \- Total Relationships: 13 \- DNS Associations: 7 unique entries \--- \## SUBNET ANALYSIS (192.248.150.0/24) **Neighborhood Assessment:** \- Abuse Density: 0 (clean) \- Active Siblings: 0 \- Threat Siblings: 0 \- Classification: CLEAN \- Inherited Risk: 0 \- Total Siblings: 1 (target IP only) **Control Plane Data:** \- Operator Score: 0.1304 (Minimal) \- RPKI State: NOT VALIDATED \- IRR Consistency: NOT AVAILABLE \- Route Changes (30d): 0 \--- \## DEFENSIVE RECOMMENDATIONS **Immediate Actions:** 1. **Block** IP at perimeter firewall (recommended due to risk score 55/100) 2. **Increase logging** verbosity for traffic from this IP 3. **Monitor** for any service changes or port openings **Firewall Rules Provided:** \- iptables: \`iptables -A INPUT -s 192.248.150.180 -j DROP\` \- nftables: \`nft add rule inet filter input ip saddr 192.248.150.180 drop\` \- nginx: \`deny 192.248.150.180;\` \- pfSense: \`192.248.150.180/32\` \- Cloudflare WAF: Block with expression \`ip.src eq 192.248.150.180\` \- AWS WAF: Add \`192.248.150.180/32\` to block list **Contextual Notes:** \- The IP is hosted on Vultr cloud infrastructure \- No open services detected (likely firewalled or dormant) \- 3 DNSBL listings indicate some prior reputation issues \- Subnet is clean with no neighboring threats \--- \## INTELLIGENCE ASSESSMENT **Threat Level:** MODERATE This IP exhibits elevated risk primarily due to cloud hosting infrastructure with some DNSBL history. The clean subnet neighborhood and lack of active threat indicators suggest this may be a dormant or previously compromised address now cleaned. The absence of open services indicates the IP is not currently serving malicious content. **Priority:** MEDIUM \- Block immediately if receiving traffic from this IP \- Monitor for service changes \- No immediate lateral movement risk (clean neighborhood) **Recommended Action:** Implement blocking rules at perimeter; monitor for any changes in service posture or threat indicators. --- Source: IPDebrief, "192.248.150.180 IP intelligence", https://ipdebrief.com/192.248.150.180, updated 2026-10-30. Assessments are probabilistic.