46.4.161.109📋 Copy

# IP INTELLIGENCE BRIEFING: 46.4.161.109

## Executive Summary

Target IP 46.4.161.109 is classified as Low Risk with an overall risk score of 25. The IP is hosted within Hetzner Online GmbH cloud infrastructure (ASN 24940) in Gunzenhausen, Germany. No active threat indicators, campaign associations, or persistent malicious behavior were observed. The IP shows minimal abuse exposure with one DNSBL listing out of eight total lists.

## Infrastructure Profile

• IP Address: 46.4.161.109/32
• Provider: Hetzner Online GmbH (HOS-1265119)
• Network Range: 46.4.161.96/27
• ASN: 24940
• Registry: RIPE
• Location: D-91710 Gunzenhausen, Saxony, Germany (51.17°N, 10.45°E)
• Infrastructure Type: Cloud Computing
• Timezone: Europe/Berlin

## DNS Resolution

• PTR Record: server.edwin.one
• Forward Resolution: server.edwin.one (unconfirmed)
• Email Authentication: SPF and DMARC records present
• No forward confirmation: Reverse DNS does not resolve to the queried IP

## Network Services & Ports

• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None active
• Service Classification: Firewalled / No Services
• Scanner Detection: No open port enumeration strikes recorded

## Threat Indicators

• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 explicit blacklists
• DNSBL Listings: 1 out of 8 total lists (high severity)
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• Known Campaigns: None identified
• Threat Feeds: No matches

## Temporal Analysis

• Observation Count: 16 signals collected
• Most Recent Observation: 2026-06-16T20:56:23 UTC
• Ownership Stability: 0 ownership changes recorded
• Threat Persistence: 0 days (not persistently malicious)
• Route Stability: Route changes detected within 30-day period

## Neighborhood Analysis

• Subnet: 46.4.161.109/24
• Abuse Density: 0.0 (no sibling abuse activity)
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings Analyzed: 0

## Related Entities

• Network: HOS-1265119 (Hetzner hosting network)
• Hostnames: server.edwin.one (DNS association)

## Recommended Actions

No specific firewall rules or blocking recommendations generated. The IP demonstrates low-risk characteristics appropriate for standard monitoring. Network defenders may observe the hostname "server.edwin.one" for correlation with known legitimate services.

## Intelligence Assessment

The target IP represents legitimate cloud computing infrastructure from a major German hosting provider (Hetzner). Current threat indicators, behavioral analysis, and historical signals do not suggest malicious activity. The single DNSBL listing warrants periodic review but does not indicate active exploitation. Standard defensive monitoring is sufficient; no immediate mitigation required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.