# 45.79.111.167 — IP Intelligence Summary 45.79.111.167 is an IPv4 address operated by Linode (AS63949), geolocated to Fremont, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name li1210-167.members.linode.com. As of November 1, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/45.79.111.167 - Last updated: 2026-11-01 ## Ownership - Organization: Linode - Network name: LINODE - Allocated block: 45.79.0.0/16 - ASN: AS63949 (https://ipdebrief.com/asn/63949) - Regional registry: ARIN - Cloud / hosting provider: Linode ## Location - City: Fremont - Region: California - Country: United States - Time zone: — ## Network classification - Infrastructure type: CloudCompute - Datacenter / hosting: yes - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - li1210-167.members.linode.com - Forward-confirmed: yes ## Exposed services - 22/tcp — ssh ## Analyst narrative \# IP Intelligence Briefing: 45.79.111.167/32 **Classification:** LOW RISK – Cloud Infrastructure Asset **Date:** 2026-07-27 **Analyst:** IPDebrief Intelligence Unit \--- \## Executive Summary IP address 45.79.111.167 is a Linode cloud hosting endpoint classified as LOW RISK (Risk Score: 25). The address operates within the 45.79.0.0/16 CIDR block owned by Linode (ASN 63949) and shows no active threat indicators or malicious behavior. The IP resolves to a Linode member hostname (li1210-167.members.linode.com) and exhibits characteristics consistent with legitimate cloud infrastructure usage. \--- \## Infrastructure Profile | Attribute | Value | |-----------|-------| | **Organization** | Linode | | **ASN** | 63949 | | **Country** | United States | | **Region** | California (Fremont) | | **Infrastructure Type** | Cloud Compute | | **Service Purpose** | Firewalled / No Services | | **Risk Score** | 25 / 100 | | **Abuse Confidence Score** | Not Available | **Ownership & Registration:** The IP is registered within the LINODE network (45.79.0.0/16) under the American Registry for Internet Numbers (ARIN). Abuse contact information is available via RDAP. \--- \## Network & Service Status **Open Ports:** None detected **HTTP/HTTPS Services:** Not running **TLS Certificates:** None **Reverse DNS (PTR):** li1210-167.members.linode.com **Forward DNS Resolution:** li1210-167.members.linode.com (Forward confirmed: Yes) The IP shows no open services or active web presence, which is consistent with cloud hosting infrastructure that may be reserved, in use, or behind firewalls. \--- \## Threat Intelligence Indicators **Threat Classification:** No threats identified \- **Known Attacker:** No \- **Spam Source:** No \- **Tor Exit Node:** No \- **Proxy Service:** No \- **Blacklist Count:** 0 (Primary profile) \- **Known Campaigns:** None **DNSBL Status:** Listed on 1 of 8 monitored DNSBLs \- **DNSBL Operator Score:** 0.2609 (Label: "Basic") \- **Max Severity:** High (per recent observation) The DNSBL listing is a notable finding that warrants monitoring, though the overall risk profile remains low. \--- \## Observation History A total of 17 signal observations have been recorded for this IP address. Key observations include: \- **RTT/Geolocation Validation:** Multiple observations indicate geolocation inconsistencies. The IP is claimed to be in Fremont, California, yet RTT measurements (83-91ms) are inconsistent with the claimed distance of 8,843.8 km from probe origin, indicating potential measurement artifacts or routing anomalies. \- **Operator Classification:** Recent assessments classify the operator as "Basic" with moderate confidence (0.60). \- **DNSBL Activity:** One observation recorded 8 DNSBL listings with 1 active listing at high severity. \- **Overall Confidence:** Observations range from 0.20 to 0.85 confidence levels, with recent profile confidence at 0.20. \--- \## Neighborhood Analysis **Subnet:** 45.79.111.167/24 \- **Abuse Density:** 0% \- **Classification:** Clean \- **Total Siblings:** 1 \- **Active Threat Siblings:** 0 \- **Inherited Risk:** 0 The /24 subnet shows no abuse activity and contains no neighboring IPs with threat indicators. This suggests the IP is operating in isolation within a clean network segment. \--- \## Relationships Graph The IP has 11 recorded relationships, primarily consisting of: \- **DNS Associations:** Multiple entries linking to li1210-167.members.linode.com \- **Network Associations:** Links to the LINODE network infrastructure No organizational, certificate, or hostname relationships beyond Linode infrastructure were identified. \--- \## Recommended Actions Based on the risk profile and threat indicators: 1. **Monitor DNSBL Status:** The single DNSBL listing at high severity warrants periodic review. Investigate if the listing is due to IP reputation policies or actual malicious activity. 2. **No Blocking Required:** Current risk score (25) and lack of active threat indicators suggest no immediate blocking or filtering is necessary. 3. **Traffic Analysis:** If this IP appears in security logs, analyze traffic patterns for legitimate cloud compute usage vs. potential abuse. 4. **Baseline Monitoring:** Establish baseline traffic patterns for future anomaly detection. \--- \## Conclusion IP 45.79.111.167 is a Linode cloud hosting endpoint with low-risk characteristics. While a DNSBL listing has been observed, the overall profile indicates legitimate cloud infrastructure usage with no evidence of malicious activity. The IP should be treated as low-priority for monitoring unless additional threat indicators emerge. **Recommendation:** Continue standard monitoring; no immediate action required. ## Nearby addresses - 45.79.111.70 (https://ipdebrief.com/45.79.111.70) - 45.79.111.114 (https://ipdebrief.com/45.79.111.114) --- Source: IPDebrief, "45.79.111.167 IP intelligence", https://ipdebrief.com/45.79.111.167, updated 2026-11-01. Assessments are probabilistic.