45.112.71.244📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 45.112.71.244/32

Date: 2026-07-29

Classification: HIGH RISK

## EXECUTIVE SUMMARY

IP address 45.112.71.244 presents a HIGH RISK profile (Score: 80/100) associated with infrastructure provider ALLIANCEBROADBAND-IN (ASN: 23860) in Kolkata, West Bengal, India. The IP is listed on 4 of 8 DNSBL entries with high-severity ratings, indicating active reputation compromise. No persistent malicious indicators or known campaign associations were identified.

---

## TECHNICAL PROFILE

Ownership & Infrastructure

Network Services

• Port 80/TCP: HTTP (freenginx/1.28.0)
• PTR Record: node-45-112-71-244.alliancebroadband.in
• Forward Resolution: 1 hostname (alliancebroadband.in)
• SSL/TLS: Not configured

Control Plane Indicators

• Route Stability: False (0 route changes in 30 days)
• RPKI State: Not available
• DNSSEC: Valid
• DNSBL Listings: 4 of 8 total lists

---

## THREAT ASSESSMENT

Risk Indicators

• Reputation Score: 80/100 (HIGH RISK)
• DNSBL Status: Listed on 4 blacklists with high-severity ratings
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Association: None identified

Historical Activity

• Observations: 17 total signals recorded
• Recent Activity: 2026-07-29 showed DNSBL listings with high severity
• Ownership Persistence: No ownership changes detected
• Threat Persistence: Not persistently malicious

---

## NEIGHBORHOOD ANALYSIS

Subnet: 45.112.71.0/24

Abuse Density: 0

Total Siblings: 3

---

## RELATIONSHIP GRAPH

• Network Associations: ALLIANCEBROADBAND-IN (3 instances)
• DNS Associations: node-45-112-71-244.alliancebroadband.in (3 instances)

---

## RECOMMENDED ACTIONS

Immediate Mitigation

1. Increase Logging: Enable verbose logging for all traffic from this IP

2. Block at Perimeter: Implement firewall rules across all security layers

Firewall Implementation

```bash

# iptables

iptables -A INPUT -s 45.112.71.244 -j DROP

# nftables

nft add rule inet filter input ip saddr 45.112.71.244 drop

# nginx

deny 45.112.71.244;

# pfSense

45.112.71.244/32

# Cloudflare WAF

Block 45.112.71.244 — IPDebrief risk score 80

# AWS WAF

Addresses: ["45.112.71.244/32"]

Description: IPDebrief risk 80

```

---

## INTELLIGENCE NOTES

• The IP operates as a single-service host with HTTP services on port 80
• DNSBL listings suggest the IP has been flagged for abuse activity
• No correlation to known APT campaigns or coordinated attacks
• Neighbor IPs in the /24 subnet show moderate risk scores (30-55), suggesting this may be an isolated incident within the broader infrastructure

Analyst Recommendation: Implement blocking while maintaining audit trails. Monitor for any changes in behavior or additional DNSBL listings.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.