45.78.199.70📋 Copy

# IP Intelligence Briefing: 45.78.199.70/32

Date: 2026-06-26

Classification: MODERATE RISK

Status: RECOMMENDED FOR BLOCK

---

## Executive Summary

IP address 45.78.199.70 is associated with IRT-BYTEPLUS-SG (ASN 150436) and is located in Singapore. The IP presents a moderate risk profile (risk score: 40/100) with evidence of being firewalled with no open services. The /24 subnet (45.78.199.0/24) exhibits high abuse density at 57.14%, with 12 of 21 sibling IPs classified as threats.

## Technical Profile

## Neighborhood Analysis

The 45.78.199.0/24 subnet demonstrates elevated abuse characteristics:

• Abuse Density: 57.14%
• Total Siblings: 21 IPs
• Active Siblings: 11
• Threat Siblings: 12
• Classification: high_abuse

Risk distribution across neighboring IPs shows 11 medium-risk and 9 low-risk addresses, with no high-risk neighbors currently identified. This indicates the subnet is shared infrastructure with mixed service profiles.

## Threat Indicators

• Threat Indicators: None identified
• Campaign Correlation: None
• Known Malicious Activity: No direct attribution
• Blacklist Count: 0
• Operator Score: 0.1304 (Minimal)

The IP is not associated with any known malicious campaigns and shows no Tor exit node behavior or spam source classification.

## Behavioral History

Observation history reveals 18 signals captured between 2026-06-05 and 2026-06-26. Key temporal indicators:

• Subnet Abuse Classification: High abuse status observed as of 2026-06-05
• Operator Classification: Minimal threat level maintained
• Route Stability: Unstable routing with 0 route changes in 30 days
• Threat Persistence: 0 threat persistence days observed

## Recommended Security Actions

Based on risk profile analysis, the following blocking rules are recommended:

```bash

# iptables

iptables -A INPUT -s 45.78.199.70 -j DROP

# nftables

nft add rule inet filter input ip saddr 45.78.199.70 drop

# nginx

deny 45.78.199.70;

# pfSense

45.78.199.70/32

# Cloudflare WAF

{

"description": "Block 45.78.199.70 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 45.78.199.70"

}

}

# AWS WAF

{

"Addresses": ["45.78.199.70/32"],

"Description": "IPDebrief risk 40"

}

```

## Analyst Notes

1. Subnet Context: The IP belongs to a subnet with 57.14% abuse density. Consider implementing subnet-level blocking (45.78.199.0/24) if threat correlation warrants.

2. Service Status: No open ports or services detected. The "Firewalled / No Services" classification suggests the IP may be used for outbound traffic only or is behind enterprise firewalling.

3. Geographic Attribution: Singapore-based infrastructure under BYTEPLUS hosting. Verify against known legitimate traffic patterns before blocking.

4. Action Priority: Medium. The moderate risk score (40) combined with subnet-level abuse indicators warrants blocking, but correlation with internal threat intelligence is recommended before enforcement.

---

Source: IPDebrief Intelligence Platform

Data Freshness: Current (2026-06-26)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.