# IP Intelligence Briefing: 46.166.172.198/32
Classification: Low Risk Infrastructure Host
Date: 2026-07-30
## Executive Summary
IP address 46.166.172.198 was profiled as a low-risk infrastructure host associated with Cherry Servers NOC (ASN 16125) in Lithuania. The IP demonstrated no active threat indicators, no blacklist entries, and exhibited stable ownership with no persistent malicious activity observed.
## Technical Profile
Ownership & Network:
- Organization: Cherry Servers NOC
- ASN: 16125
- RIR: RIPE
- CIDR Block: 46.166.172.192/29
- Abuse Contact: abuse@cherryservers.com
Geolocation:
- Country: Lithuania (LT)
- Region: Siauliai
- Coordinates: 55.94°N, 23.24°E
Network Classification:
- Primary Role: Single-Service Host
- Open Ports: TCP/22 (SSH - OpenSSH_9.2p1 Debian)
- TLS Certificate: None detected
- HTTP Services: None detected
Reputation Metrics:
- Risk Score: 0
- Provider Score: 0
- Authority Score: 0
- Blacklist Count: 0
- Abuse Confidence: Not applicable
- Known Campaigns: None
## Threat Indicators Analysis
The IP showed no active threat indicators across all monitored categories:
- Tor Exit Node: Not detected
- Known Attacker: Not identified
- Spam Source: Not flagged
- DNSBL Listings: 0 entries
- Campaign Correlations: None detected
- Threat Persistence: 0 days observed
## Historical Observation Summary
Analysis of 19 observations from July 2026 revealed:
- Ownership changes: 0
- Threat observation count: 0
- Persistently malicious flag: False
- Network stability: Confirmed with forward DNS resolution verified
## Network Neighborhood Assessment
Analysis of 46.166.172.0/24 subnet indicated:
- Total sibling IPs: 5 (including subject)
- Active siblings: 0
- Threat siblings: 0
- Subnet abuse density: 0 (Clean)
- Risk distribution: 0 high-risk, 0 medium-risk, 4 low-risk
Notable neighbors included 46.166.172.196 and 46.166.172.197 with risk scores of 25, while 46.166.172.194 and 46.166.172.195 maintained risk scores of 0.
## Relationship Graph
Six relationships were identified:
- DNS associations: ip-46-166-172-198.003.ptr.cherryservers.net
- Network associations: net-207177-284086-239806
## Control Plane Analysis
- BGP Origin ASN: 16125
- BGP Prefix: 46.166.168.0/21
- Route stability: False
- Route changes (30-day): 0
- DNSSEC: Valid
- DNSBL total lists: 8
## Operational Recommendations
Based on the low-risk profile (risk score 0), no specific firewall rules or blocking actions are recommended. The IP demonstrates characteristics consistent with legitimate hosting infrastructure:
- Stable ownership with Cherry Servers NOC
- Clean neighborhood with minimal abuse density
- No active threat campaigns or blacklist entries
Suggested Actions:
- Monitor for changes in reputation metrics
- Review control plane route stability if this IP becomes a destination
- Maintain standard logging and monitoring procedures
- No immediate blocking or rate-limiting required
---
*This briefing was generated from IPDebrief intelligence data. SOC analysts should correlate with additional threat intelligence sources before operational decisions.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Cherry Servers NOC |
| ASN | AS16125 |
| Network Name | net-207177-284086-239806 |
| CIDR Block | 46.166.172.192/29 |
| RIR | RIPE |
| Country | LT |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ip-46-166-172-198.003.ptr.cherryservers.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ip-46-166-172-198.003.ptr.cherryservers.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 4 |
| routing | 17% | 1 | 1 |
| services | 26% | 2 | 2 |
| ownership | 36% | 2 | 4 |
| reputation | 33% | 1 | 3 |
| geolocation | 24% | 2 | 2 |
| Overall | 29% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-27 22:38:35 UTC |
| Last Seen | 2026-08-03 05:37:12 UTC |
| Profile Built | 2026-08-03 09:10:53 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 41 |
Full dossier details are available via our API.