45.137.126.76
IP Intelligence Briefing: 45.137.126.76
Date: 2026-06-11
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Ownership: Registered to netutils-mnt (ASN 62240) under ARIN.
- Geolocation: Chennai, Tamil Nadu, India (latitude 13.09, longitude 80.27).
- Network Role: Firewalled / No Services (no open ports or TLS/HTTP activity).
- Threat Indicators: No direct malicious activity detected (no blacklists, campaigns, or known attacker flags).
---
**2. Observation History**
- Abuse Density: 13.7% in the 45.137.126.0/24 subnet (mostly clean).
- Historical Signals:
- DNSSEC validation confirmed.
- 7 out of 51 subnet siblings flagged as threats.
- No persistent malicious behavior or ownership changes.
- Geo Plausibility: Flagged as implausible (potential spoofed location).
---
**3. Network Relationships**
- Linked Entities:
- Subnet: 45.137.126.0/24 (abuse density: 13.7%).
- Shared network: IPXO (same ASN 62240).
- Key Associations: No direct ties to known malicious organizations or domains.
---
**4. Neighborhood Analysis**
- Subnet Risk:
- 17 IPs flagged as medium risk (25–50 score).
- 33 IPs labeled low risk (≤20 score).
- 7 threat siblings identified (20–25 score).
- Notable Neighbors:
- 45.137.126.11, 45.137.126.54–56, and 45.137.126.58 show moderate risk.
- Subnet abuse density suggests potential for collateral risk.
---
**5. Recommendations**
- Monitor Subnet: Track 45.137.126.0/24 for new threats or abnormal activity.
- Verify Geolocation: Investigate implausible geo validation (India vs. reported location).
- Isolate Risk: Consider blocking or restricting access to the subnet due to neighbor risks.
- Validate DNSSEC: Confirm DNSSEC validity for subdomain security.
---
Conclusion: The IP itself is not malicious, but its subnet contains risky neighbors. SOC teams should prioritize monitoring the subnet and validating the IP’s geolocation to mitigate potential collateral risks.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | netutils-mnt |
| ASN | AS62240 |
| Network Name | IPXO |
| CIDR Block | 45.137.126.0/24 |
| RIR | ARIN |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 30% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 14% | 6 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-26 00:50:49 UTC |
| Last Seen | 2026-06-11 02:22:20 UTC |
| Profile Built | 2026-06-11 02:29:33 UTC |
| Data Freshness | Live |
| Signal Types | 14 |
| Total Observations | 14 |
Full dossier details are available via our API.