192.46.237.133📋 Copy

# IP Intelligence Briefing: 192.46.237.133/32

Classification: Cloud Compute Infrastructure | Risk Level: Moderate (40/100)

## Infrastructure Profile

The target IP 192.46.237.133 is a Linode cloud compute instance (ASN 63949) within the US-LINODE-19881220 network block (192.46.224.0/20). The instance is geolocated to Frankfurt am Main, Germany, and is registered under Linode's infrastructure. The IP is configured with firewalled/no services status, indicating no open ports or active services are exposed. DNS resolution maps to li2180-133.members.linode.com with confirmed forward resolution.

## Threat Indicators

• Reputation: Moderate Risk
• Blacklist Status: Not listed on major threat feeds (blacklistCount: 0)
• Tor/Proxy Status: Not identified as Tor exit node, proxy, or CDN
• Threat Campaigns: No known campaign associations
• DNSBL Listings: 2 listings detected across 8 total lists
• Abuse Confidence Score: Not applicable (no active threat signals)

## Network Context

The immediate /24 neighborhood (192.46.237.0/24) exhibits low abuse density with classification marked as "mostly_clean." The subnet shows 1 total sibling IP with 1 threat-sibling identified. Inherited risk assessment scores 2 on a 10-point scale, indicating minimal neighborhood-level threat correlation.

## Historical Observations

Signal observation history contains 22 recorded observations spanning June 2026. The most recent activity occurred on 2026-06-21. Historical signals include:

• Operator score consistently at 0.2609 (Basic classification)
• Data sufficiency maintained at 6/6 dimensions covered
• Geolocation validation shows ICMP blocking with plausible geo-location (296.5 km distance from Frankfurt)
• No persistent malicious threat patterns detected

## Network Role Assessment

• Infrastructure Type: Cloud Compute
• Connection Type: N/A (firewalled)
• Hosting Status: Yes (Linode hosting infrastructure)
• Anycast/Routing: No Anycast detected
• BGP Prefix: 192.46.232.0/21 (stable for 30 days)

## Recommendations

No immediate blocking actions recommended. The IP represents legitimate cloud infrastructure with moderate risk scoring typical of hosting environments. Monitor for any service activation or port changes that would alter the current "firewalled/no services" classification. Standard cloud provider threat intelligence monitoring applies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.