Intellect Briefing: 45.138.175.174/32
Ownership and Registration
The IP address 45.138.175.174 is assigned to aurologic GmbH under the network name AUROLOGIC-ANY-INFRA (ASN 30823). Registration is attributed to the ARIN RIR. Geolocation data indicates a location in London, Germany, with a timezone of Europe/Berlin.
Reputation and Risk
Current reputation analysis classifies the address as Moderate Risk with a score of 40. The address is tagged as a "Suspicious Host" within threat actor categorizations. No specific attack indicators, known campaigns, or active attacker status were observed during the review period.
Network Behavior and Services
Network scans revealed no open ports, indicating the host is firewalled or running no services. DNS records resolve the PTR hostname to core01.fra5.de.aurologic.net. The address lacks standard email authentication (SPF, DMARC).
Neighborhood and Subnet Context
The /24 subnet (45.138.175.0/24) is classified as mostly_clean with an abuse density of 0.1429. One threat sibling was detected within the subnet block. The control plane shows route instability over the last 30 days.
Recommendations
Due to the Moderate Risk classification and lack of definitive service data, rate-limiting is recommended to mitigate potential abuse without blocking legitimate infrastructure.
Firewall Rules
* iptables: `iptables -A INPUT -s 45.138.175.174 -m limit --limit 5/min -j ACCEPT`
* nginx: `limit_req zone=ipdebrief burst=5;`
* pf: `pass in on egress from 45.138.175.174 max-pkt-rate 5/1`
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | aurologic GmbH |
| ASN | AS30823 |
| Network Name | AUROLOGIC-ANY-INFRA |
| CIDR Block | 45.138.175.0/24 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | core01.fra5.de.aurologic.net |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | core01.fra5.de.aurologic.net |
๐ DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-29 10:57:35 UTC |
| Last Seen | 2026-09-21 04:22:18 UTC |
| Profile Built | 2026-09-21 04:36:30 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 31 |
Full dossier details are available via our API.