45.162.20.36
INTELLIGENCE BRIEFING: 45.162.20.36/32
Executive Summary
Analysts observed IP address 45.162.20.36 operating with a High Risk reputation and a risk score of 70. The asset is hosted by ELDA SALERNO (FULLNET) (ASN 267690) within the 45.162.20.0/23 block, with geolocation data placing the server in Cabildo, Argentina. Despite the subnet classification as mostly clean, the target IP demonstrated elevated threat indicators requiring immediate perimeter review.
Network Profile
The IP functioned as a web server running lighttpd/1.4.39. Open ports included TCP/80 (HTTP), TCP/443 (HTTPS), and TCP/22 (SSH). The SSH service utilized dropbear with curve25519-sha256 key exchange. DNS hygiene was poor, lacking SPF and DMARC records, though DNSSEC validation was confirmed.
Threat Indicators
Threat analysis identified the IP as a Blacklisted Host. The address appeared on four of eight DNS blocklists. While no known active campaigns or Tor exit node association was detected, the risk profile was supported by a risk score of 70. A contradiction was noted between the claimed geolocation and RTT physics measurements. Data freshness confirmed the profile as live with 34 total observations recorded.
Neighborhood Context
The /24 subnet (45.162.20.0/24) contained 146 sibling IPs with an abuse density of 0.1301. Risk distribution within the neighborhood showed an inherited risk score of 5, though the target IP exhibited elevated threat characteristics compared to its peers.
Recommended Actions
Defensive operations required blocking traffic from 45.162.20.36/32 at the firewall perimeter. Analysts should implement iptables or pf blocking rules and configure WAF rules to deny requests from this address. Monitoring should extend to related IPs within the 45.162.20.0/24 subnet for potential lateral movement.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ELDA SALERNO(FULLNET) |
| ASN | AS267690 |
| Network Name | 45.162.20.0 - 45.162.21.255 |
| CIDR Block | 45.162.20.0/23 |
| RIR | ARIN |
| Country | AR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS267690 |
| Network Prefix | 45.162.20.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 6 |
| routing | 8% | 1 | 1 |
| services | 38% | 2 | 6 |
| ownership | 23% | 2 | 4 |
| reputation | 23% | 1 | 4 |
| geolocation | 25% | 2 | 3 |
| Overall | 26% | 10 | 24 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-16 10:36:47 UTC |
| Last Seen | 2026-09-05 22:50:22 UTC |
| Profile Built | 2026-09-06 18:52:47 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 38 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 45.162.20.36
Who owns the IP address 45.162.20.36?
45.162.20.36 is registered to ELDA SALERNO(FULLNET). The address falls within the 45.162.20.0/23 network block. Registration is held at ARIN.
Where is 45.162.20.36 located?
Geolocation data places 45.162.20.36 in Cabildo, B, Argentina. The local time zone is America/Argentina/Buenos_Aires. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 45.162.20.36 malicious or safe?
45.162.20.36 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 45.162.20.36?
Responsive ports observed on 45.162.20.36 include 80, 443, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.