185.15.171.77📋 Copy

IP Intelligence Briefing: 185.15.171.77

Date: 2026-06-17

---

**1. Risk Profile**

• Overall Risk: Moderate (Risk Score: 55)
• Network Role: Web Server (HTTP/HTTPS/SSH services active)
• Ownership: Managed by DONATO CONTE (ASN 57558, RIPE) in Italy (Basilicate).
• Threat Indicators: No active malicious campaigns, spam, or known attacker associations.

---

**2. Network & Geolocation**

• Geolocation:

- City: Tito, Basilicate, Italy

- Timezone: Europe/Rome

- Accuracy Radius: 750 km (mixed geo-source consensus).

• Subnet: 185.15.171.77/24

- Abuse Density: 36% (moderate risk).

- High-Risk Neighbors: 32 IPs (e.g., 185.15.171.2, 185.15.171.4).

- Total Siblings: 89 IPs (32 active, 26 flagged as threats).

---

**3. Services & TLS**

• Open Ports:

- 80 (HTTP), 443 (HTTPS), 22 (SSH).

- SSH Banner: Dropbear (version 2023).

• TLS Certificate:

- Issued by Ubiquiti Networks Inc. (valid, not self-signed).

- SAN: `UBNT-24:5A:4C:EC:1A:C3`.

- Server: `lighttpd/1.4.54`.

---

**4. Threat & DNS**

• DNS Associations:

- Resolves to `host077-171-015-185.retemetis.net` (no malicious domains detected).

- DNSBL Listings: 4/8 lists (moderate risk).

• Threat Observations:

- No recent malicious activity (last observation: 2026-06-17).

- No Tor,VPN, or proxy indicators.

---

**5. Recommendations**

1. Monitor Subnet: High-risk neighbors (e.g., 185.15.171.2, 185.15.171.4) may indicate broader network compromise.

2. Verify DNSBL Listings: Investigate why 4/8 DNSBLs flag this IP (e.g., spam, phishing).

3. Secure SSH: Ensure SSH keys are rotated and restrict access to trusted IPs.

4. Check Certificate Validity: Confirm Ubiquiti certificate is revoked or updated if unexpected.

Next Steps: Cross-reference with 185.15.171.2 and 185.15.171.4 for potential lateral movement or shared infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.