102.222.172.45📋 Copy

## IP Intelligence Briefing: 102.222.172.45/32

Classification: Low Risk | Risk Score: 25 | Last Updated: 2026-07-29

---

Executive Summary

IP 102.222.172.45 is classified as low risk with minimal threat indicators. The address shows firewalled status with no active services detected. However, geolocation inconsistencies and a single high-severity DNSBL listing warrant monitoring.

Ownership & Network Infrastructure

• ASN: 328770
• BGP Prefix: 102.222.172.0/24
• RIR: AFRINIC
• Route Stability: Unstable (false)
• Control Plane Status: Not MoAS

Geolocation Analysis

• Primary Location: New York, US (US-NY)
• Historical Discrepancy: Recent observations show ACCRA, Ghana (GH)
• Conclusion: Geolocation inconsistency may indicate proxy usage or spoofing. Requires correlation with traffic patterns.

Threat Indicators

• DNSBL Status: Listed on 1 of 8 total DNSBLs (high severity)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable

DNS Reputation

• PTR Hostname: 102-222-172-45.simbafibergh.com
• Domain: simbafibergh.com
• SPF Record: Present
• DMARC Record: Present
• Forward Resolution: Unconfirmed (false)

Services & Network Role

• Open Ports: None detected
• Classification: Firewalled / No Services
• Infrastructure Type: Not cloud, CDN, VPN, proxy, or hosting

Neighborhood Analysis (102.222.172.0/24)

• Abuse Density: 0.5 (moderate)
• Classification: Mostly clean
• Total Siblings: 2
• Threat Siblings: 1
• Notable Neighbor: 102.222.172.42 (Risk Score: 25, Authority Score: 50)

Observation History (16 Total Signals)

Recent observations indicate:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 1
• Not persistently malicious

Recommended Actions

• Firewall Rules: No immediate blocking recommended
• Monitoring: Continue monitoring for geolocation shifts
• Correlation: Investigate DNSBL listing source and severity
• Related IPs: Monitor neighbor 102.222.172.42 for coordinated activity

Intelligence Notes

The IP appears to be a legitimate residential or business address with firewalled services. The single high-severity DNSBL listing and neighborhood threat density suggest potential abuse correlation with sibling IP 102.222.172.42. Recommend correlating with threat intelligence feeds and monitoring for changes in geolocation consistency.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.