45.15.224.178📋 Copy

IP Intelligence Briefing: 45.15.224.178

Date: 2026-06-03

---

**1. Risk Profile**

• Risk Score: 50 (Moderate Risk)
• Threat Indicators: No known malware, spam, or attacker activity detected.
• Ownership: Registered to md-primanet-1-mnt (ARIN), with no abuse confidence score.
• Geolocation: Moldova (MD), Chisinau, latitude 47, longitude 28.86.
• Network Role: Single-service host (SSH on port 22).

---

**2. Observation History**

• Activity: 19 observations over 30 days (last update: 2026-06-03).
• Trends: No persistent malicious activity; risk score stable.
• DNS: No PTR records or domain associations.
• Services: Open SSH (Dropbear 2019.78). No TLS certs or HTTP activity.

---

**3. Relationships**

• Network Links:

- Same network: MD-PRIMA-NET-20190513 (repeated 47 times).

• No direct ties to known malicious entities, campaigns, or DNSBL listings.

---

**4. Neighborhood Analysis**

• Subnet: 45.15.224.178/24.
• Neighbors: No reported sibling IPs (unusual for a /24 subnet).
• Abuse Density: 0 (clean).

---

**5. Recommended Actions**

• Monitor: SSH access (port 22) for unexpected activity.
• Block/Allow: Consider blocking based on risk score (50) if not required.
• Firewall Rules:

- iptables: `iptables -A INPUT -s 45.15.224.178 -j DROP`

- Cloudflare WAF: Block IP with rule `ip.src eq 45.15.224.178`

---

Conclusion:

The IP exhibits moderate risk with no direct malicious indicators. Focus on SSH service verification and monitor for unexpected behavior. The lack of neighboring IPs and clean subnet suggest limited network activity, but further investigation is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.