45.84.137.144📋 Copy

# IP Intelligence Briefing: 45.84.137.144/32

## Executive Summary

Intellect analyzed IP 45.84.137.144 on 2024-01-15. The system classified the address as Moderate Risk (score: 50). The IP belongs to Packethub-20230501 network under organization Alina Gatsaniuk (ASN 136787) registered with ARIN. No active threat indicators or malicious campaigns were detected.

## Technical Profile

• IP Address: 45.84.137.144/32
• ASN: 136787 (Alina Gatsaniuk)
• CIDR Block: 45.84.137.0/24
• Geolocation: Paris, France (primary consensus); secondary geolocation reports indicate Berlin, Germany (400km accuracy radius)
• Service Status: Firewalled / No Services detected
• Network Classification: Private infrastructure / Not CDN, Cloud, VPN, or Hosting

## Threat Assessment

The IP showed no active threat indicators:

• Blacklist Status: Listed on 2 of 8 DNSBL lists
• Known Attacker: No
• Spam Source: No
• Tor Exit: No
• Known Campaigns: None identified
• Persistently Malicious: No

Risk Breakdown:

• Provider Score: 0 (not a provider infrastructure)
• Authority Score: 0 (not an authority infrastructure)
• Abuse Confidence: Not scored
• Operator Score: 0.1304 (Minimal)

## Neighborhood Analysis

Subnet 45.84.137.0/24 contains 3 sibling IPs with low abuse density (0.0). Risk distribution shows:

• 45.84.137.34: Risk Score 25 (Low)
• 45.84.137.141: Risk Score 0 (Low)
• 45.84.137.244: Risk Score 25 (Low)

No high or medium-risk neighbors detected.

## Observed History

13 signal observations recorded as of 2026-07-30. Key observations include:

• Ownership registration: Alina Gatsaniuk / Packethub-20230501
• Geographic inconsistencies observed (FR/DE discrepancy)
• Port scanning activity detected (ports scanned but no open services)
• No ownership changes or threat persistence events

## Relationships

Network relationships identified:

• Packethub-20230501 (Same Network) - Listed twice in relationship graph

## Recommended Actions

Immediate Action Required: Block traffic from this IP.

Firewall Rules:

```

iptables: iptables -A INPUT -s 45.84.137.144 -j DROP

nftables: nft add rule inet filter input ip saddr 45.84.137.144 drop

nginx: deny 45.84.137.144;

pfSense: 45.84.137.144/32

Cloudflare WAF: Block (ip.src eq 45.84.137.144)

AWS WAF: Add 45.84.137.144/32

```

## Intelligence Notes

1. Low-Activity Infrastructure: No open ports or services detected. IP likely used for transient or firewalled purposes.

2. Geographic Inconsistency: Multiple geolocation sources report different countries (France/Germany) with high accuracy uncertainty (400km). This may indicate:

- Poor geolocation database quality

- Cloud provider multi-region routing

- Misconfigured reporting

3. Limited Reputation: Listed on 2 of 8 DNSBLs but no known campaigns or persistent malicious behavior.

4. Neighborhood Safety: All sibling IPs in the /24 subnet show low risk scores (0-25).

## Conclusion

45.84.137.144 represents moderate risk due to DNSBL listings and geographic inconsistencies, despite showing no active threat indicators. Recommend blocking at perimeter firewall. Monitor for service activation or increased scanning activity. No immediate threat to network integrity detected.

---

*Generated by IPDebrief Intelligence Platform. All data sourced from live network intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.