199.45.155.99📋 Copy

IP INTELLIGENCE BRIEFING: 199.45.155.99/32

Executive Summary

IP address 199.45.155.99 operates under moderate risk classification (65/100) and is associated with Censys, Inc. (ASN 398722). The IP resolves to censys-scanner.com and demonstrates no active open services, indicating firewall-protected infrastructure. While the individual IP lacks direct threat indicators, the /24 subnet exhibits elevated abuse density, warranting contextual monitoring.

Ownership and Geolocation

• Organization: Censys, Inc.
• ASN: 398722
• Country: United States (US)
• Geolocation Accuracy: Regional (2,500km radius)
• Network Role: Firewalled / No Services detected

Threat Profile

• Risk Score: 65/100 (Moderate Risk)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Threat Feeds: None detected

Network Services

• Open Ports: None detected
• DNS Resolution: 99.155.45.199.censys-scanner.com
• HTTP Services: None active
• TLS Certificates: None

Neighborhood Analysis (199.45.155.0/24)

• Total Siblings: 48
• Active Siblings: 24
• Threat Siblings: 32
• Abuse Density: 0.6667 (High Abuse Classification)
• Inherited Risk: 26

The subnet demonstrates concentrated activity with 32 sibling IPs flagged as threats. Risk distribution across the /24 shows 44 IPs with medium-risk scores (40-65 range) and 3 with low-risk scores.

Observation History

• Total Observations: 18 signals recorded
• Most Recent: 2026-06-25
• Signal Pattern: Consistent minimal activity profile
• Threat Persistence: No persistent malicious activity detected
• Ownership Changes: 0 (stable registration)

Relationship Graph

• Total Relationships: 32
• Primary Associations: Multiple DNS associations to censys-scanner.com hostnames
• Network Associations: CENSY network block

Recommended Actions

1. Monitoring: Increase logging verbosity for traffic from this IP address

2. Firewall Rules: Implement blocking based on organizational policy

3. Contextual Review: Monitor subnet 199.45.155.0/24 for correlated activity patterns

Recommended Blocking Rules

• iptables: `iptables -A INPUT -s 199.45.155.99 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 199.45.155.99 drop`
• Cloudflare WAF: Block IP 199.45.155.99 (risk score 65)
• AWS WAF: Add CIDR 199.45.155.99/32 to block list

Analyst Notes

This IP belongs to Censys infrastructure, a legitimate vulnerability scanning platform. However, the elevated neighborhood abuse density suggests this /24 block may be shared across multiple operational contexts. Recommend correlating with organization-specific threat intelligence before implementing blocking measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.