2.223.170.20📋 Copy

# IP Intelligence Briefing: 2.223.170.20/32

Date: 2026-06-26

Classification: Low Risk / Residential Endpoint

Risk Score: 25/100

## Executive Summary

IP address 2.223.170.20 belongs to Sky UK Broadband Hostmaster (ASN 5607) and operates as a residential endpoint in Stoke Newington, England. The IP demonstrates low-risk characteristics with no active threat indicators, minimal operator scores, and no persistent malicious behavior observed in historical data.

## Network Profile

• ASN: 5607 (Sky UK Broadband Hostmaster)
• RIR: RIPE
• Geolocation: GB, ENG, Stoke Newington (coordinates: 55.38, -3.44; accuracy: 500km radius)
• Network Classification: Residential, Bogon: No, Cloud: No, CDN: No, VPN: No, Proxy: No, Tor: No
• Timezone: Europe/London

## Threat Assessment

• Reputation: Low Risk
• Abuse Confidence Score: Not applicable (no active abuse signals)
• Blacklist Status: 0 lists, 1 DNSBL listing total across 8 lists
• Known Attackers: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Associations: None detected
• Threat Indicators: None observed

## Behavioral Analysis

• Persistence: 0 threat observation days
• Ownership Changes: 0
• Persistent Malicious Activity: False
• Control Plane Stability: Route unstable (isRouteStable: false)
• Historical Observations: 18 total signals captured

## Neighborhood Analysis (Subnet 2.223.170.20/24)

• Abuse Density: 0 (clean classification)
• Active Siblings: 0
• Threat Siblings: 0 in current observation
• Risk Distribution: No high or medium risk neighbors detected

## Historical Signal Timeline

• 2026-06-26: Recent subnet classification marked "mostly_clean" with low inherited risk (2/10)
• 2026-06-06: Operator score 0.1304 (labeled "Minimal"), country GB confirmed via multi-signal inference

## Network Relationships

• Primary Network: BSKYB-BROADBAND (7 relationship entries)
• Network Affiliation: Consistently associated with Sky UK broadband infrastructure

## Security Actions

No specific firewall rules or blocking actions recommended. The IP presents as a legitimate residential broadband endpoint with no active threat indicators.

## SOC Analyst Notes

This IP address exhibits standard residential broadband behavior with no malicious activity detected. The low risk score (25), clean neighborhood classification, and absence of threat indicators support continued monitoring without blocking. The single DNSBL listing appears as a historical artifact with no current abuse signals. No immediate threat intelligence concerns warrant escalation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.