# 45.86.202.76 — IP Intelligence Summary

45.86.202.76 is an IPv4 address operated by VPN Consumer Frankfurt, Germany (AS206092), geolocated to Frankfurt am Main, Germany. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/45.86.202.76
- Last updated: 2026-10-07

## Ownership

- Organization: VPN Consumer Frankfurt, Germany
- Network name: FRANKFURT-DE-45-86-202-0
- Allocated block: 45.86.202.0/24
- ASN: AS206092 (https://ipdebrief.com/asn/206092)
- Regional registry: ARIN

## Location

- City: Frankfurt am Main
- Region: HE
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 45.86.202.76/32

**Classification:** LOW RISK

**Date:** 2026-07-27

**Prepared For:** SOC Analyst Team

\## Executive Summary

IP address 45.86.202.76 is classified as **Low Risk** with a risk score of 25. The address is associated with VPN Consumer infrastructure in Frankfurt, Germany (ASN 206092). No active threat indicators were detected, and the IP shows no evidence of malicious behavior. The subnet exhibits mixed classification with moderate abuse density, warranting contextual monitoring.

\## Technical Profile

| Attribute | Value |

|-----------|-------|

| **Risk Score** | 25 |

| **Reputation** | Low Risk |

| **ASN** | 206092 (security firewall ltd) |

| **Organization** | VPN Consumer Frankfurt, Germany |

| **Network** | 45.86.202.0/24 |

| **Location** | Frankfurt am Main, Germany (HE) |

| **Geo Coordinates** | 51.62°N, 8.04°E |

| **Blacklist Count** | 0 |

| **Open Ports** | None detected |

| **Service Status** | Firewalled / No Services |

\## Threat Assessment

**Active Indicators:** None

\- Not a Tor exit node

\- Not flagged as known attacker

\- Not identified as spam source

\- No active threat campaigns detected

\- No malicious DNSBL entries

**Control Plane Analysis:**

\- Route stability: Stable (0 route changes in 30 days)

\- Operator score: 0.1304 (Minimal)

\- DNSSEC: Valid

\- BGP prefix: 45.86.202.0/24

\## Neighborhood Context (45.86.202.0/24)

| Metric | Value |

|--------|-------|

| **Total Siblings** | 69 IPs |

| **Active Siblings** | 18 IPs |

| **Threat Siblings** | 17 IPs |

| **Abuse Density** | 0.2464 |

| **Classification** | Mixed |

| **Inherited Risk** | 9 |

**Risk Distribution in Subnet:**

\- High Risk: 0

\- Medium Risk: 1

\- Low Risk: 67

\## Observation History

16 observations recorded since last monitoring cycle. Key findings:

\- **Geolocation:** Consistent Frankfurt, Germany location (296.5km distance validation)

\- **RTT Metrics:** Average 104ms, minimum 5.9ms (plausible)

\- **Ownership:** Stable (0 ownership changes)

\- **Persistence:** Not persistently malicious

\- **Threat Persistence:** 0 days

\## Recommended Actions

**Current Status:** No immediate firewall rules recommended. Risk score of 25 indicates low threat profile.

**Monitoring Recommendations:**

1. Monitor subnet-level activity due to 17 threat siblings in 45.86.202.0/24

2. Continue observing for changes in service status (currently firewalled)

3. Review if inbound connections originate from this IP address

4. Consider block if observed in malicious context despite low inherent risk

\## Intelligence Narrative

The IP 45.86.202.76 presents as a legitimate, low-risk address associated with commercial VPN infrastructure in Frankfurt, Germany. The absence of open ports and services, combined with zero blacklist entries and no active threat indicators, supports classification as benign infrastructure. However, the subnet's mixed classification with 17 identified threat siblings suggests this IP range may host multiple use cases, including potentially malicious endpoints. SOC teams should monitor for any behavioral changes or service activation on this address while maintaining contextual awareness of the broader subnet's reputation.

## Nearby addresses

- 45.86.202.1 (https://ipdebrief.com/45.86.202.1)
- 45.86.202.2 (https://ipdebrief.com/45.86.202.2)
- 45.86.202.4 (https://ipdebrief.com/45.86.202.4)
- 45.86.202.5 (https://ipdebrief.com/45.86.202.5)
- 45.86.202.6 (https://ipdebrief.com/45.86.202.6)
- 45.86.202.8 (https://ipdebrief.com/45.86.202.8)
- 45.86.202.9 (https://ipdebrief.com/45.86.202.9)
- 45.86.202.11 (https://ipdebrief.com/45.86.202.11)
- 45.86.202.12 (https://ipdebrief.com/45.86.202.12)
- 45.86.202.13 (https://ipdebrief.com/45.86.202.13)
- 45.86.202.14 (https://ipdebrief.com/45.86.202.14)
- 45.86.202.18 (https://ipdebrief.com/45.86.202.18)

---

Source: IPDebrief, "45.86.202.76 IP intelligence", https://ipdebrief.com/45.86.202.76, updated 2026-10-07. Assessments are probabilistic.