45.238.105.149
IP Intelligence Briefing: 45.238.105.149
*Generated via IPDebrief tools: Profile, History, Relationships, Neighbors*
---
**Core Profile**
- Risk Score: 80 (High Risk)
- Ownership: Registered to OLAVE GUTIERREZ, ROLANDO IVAN (AS264758, ARIN).
- Geolocation: Argentina (Rio Negro, Chimpay).
- Network Role: Web server (HTTP/HTTPS, lighttpd/1.4.39).
- Threat Indicators: No direct malicious indicators, but listed in 8 DNSBL feeds (3 high-severity).
- Subnet: 45.238.105.0/24 (abuse density: 0.6667, classified as "mostly_clean").
---
**Observation History**
- Recent Activity (June 2026):
- Listed in 8 threat feeds (3 high-severity entries).
- Subnet abuse density: 0.33 (mostly clean).
- One connection failure observed (June 12).
- Geolocation inferred with coordinates (-38.42, -63.62) and 1500km accuracy.
---
**Network Relationships**
- Linked Entities:
- Same subnet: 45.238.104.0/22 (20 IPs).
- No direct links to organizations, domains, or certificates.
---
**Subnet Neighbors**
- High-Risk Neighbors:
- 45.238.105.135: Risk score 80.
- 45.238.105.144: Risk score 55.
- Subnet Abuse Density: 0.5 (1 high-risk, 1 medium-risk neighbor).
---
**Actionable Insights**
1. Threat Context: Despite no direct malicious indicators, the IP is listed in multiple DNSBLs and resides in a subnet with mixed risk. Monitor for unusual traffic patterns.
2. Geolocation Discrepancy: Inferred geolocation in Argentina conflicts with DNSSEC-valid records. Investigate potential spoofing or misconfigured DNS.
3. Subnet Monitoring: Focus on high-risk neighbors (45.238.105.135) and subnet 45.238.104.0/22 for correlation with known threats.
4. Firewall Recommendations: Block the IP and its neighbors if not explicitly trusted, given the elevated risk profile.
---
*End of Briefing*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | OLAVE GUTIERREZ, ROLANDO IVAN |
| ASN | AS264758 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | lighttpd/1.4.39 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 29% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 31% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 23% | 1 | 3 |
| geolocation | 21% | 2 | 2 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:04:21 UTC |
| Last Seen | 2026-06-23 13:42:33 UTC |
| Profile Built | 2026-06-23 13:44:55 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.