185.15.171.164📋 Copy

IP Intelligence Briefing: 185.15.171.164

Risk Profile: Moderate Risk (Risk Score: 55)

Owner: DONATO CONTE (AS: 57558, RIR: RIPE)

Geolocation: Tito, Basilicate, Italy (Coordinates: 40.5829, 15.6655)

Network Activity:

• Services: HTTP (port 80), HTTPS (port 443), SSH (port 22), and HTTP-alt (port 8080).
• DNS: Linked to `host164-171-015-185.retemetis.net` (PTR confirmed).
• Subnet: 185.15.171.164/24, with 87 total neighbors (23 high-risk, 56 medium-risk, 8 low-risk). Abuse density: 26.4%.

Threat Indicators:

• No active threats, malware, or known attacker associations detected.
• DNS records show no email authentication (SPF/DKIM/DMArC).
• TLS/SSL certificates not observed.

Network Relationships:

• Connected to subnet `METIS-V4-NET-2` (DONATO CONTE).
• No direct links to known malicious campaigns or C2 infrastructure.

Observation Trends (Last 30 Days):

• Stable ownership (no changes).
• No persistent malicious activity or threat persistence.
• DNS and geolocation data consistent across observations.

Recommendations:

• Monitor SSH and HTTP services for anomalous traffic.
• Investigate subnet abuse density (26.4%) and high-risk neighbors (e.g., 185.15.171.4, risk score 80).
• Validate DNS records and ensure DNSSEC is enforced.

Conclusion:

This IP is associated with a legitimate web server but operates in a mixed-risk subnet. While no immediate threats are detected, the moderate risk score and subnet abuse density warrant continued monitoring for potential lateral movement or network compromise.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.