# 45.86.202.77 — IP Intelligence Summary 45.86.202.77 is an IPv4 address operated by VPN Consumer Frankfurt, Germany (AS206092), geolocated to New York, United States. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/45.86.202.77 - Last updated: 2026-10-07 ## Ownership - Organization: VPN Consumer Frankfurt, Germany - Network name: FRANKFURT-DE-45-86-202-0 - Allocated block: 45.86.202.0/24 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: ARIN ## Location - City: New York - Region: US-NY - Country: United States - Time zone: America/New_York ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 45.86.202.77/32 **Classification:** LOW RISK **Date:** Current Analysis **Risk Score:** 25/100 \--- \## Executive Summary IP address 45.86.202.77 presents a low-risk profile with no active threat indicators. The address is firewalled with no open services, operates from AS206092 (security firewall ltd), and shows geolocation inconsistencies between reported US and Germany locations. No automated actions are recommended at this time. \--- \## Risk Assessment \- **Overall Risk Score:** 25 (Low Risk) \- **Reputation:** Low Risk \- **Abuse Confidence:** Not elevated \- **Known Attacker:** No \- **Spam Source:** No \- **Tor Exit Node:** No \### Risk Breakdown \- Provider Score: 0 \- Authority Score: 0 \- Stability Score: 0 \--- \## Technical Profile **Network Identification:** \- ASN: AS206092 (security firewall ltd) \- BGP Prefix: 45.86.202.0/24 \- Network Role: Infrastructure / Firewalled \- Connection Type: No active services **Geolocation:** \- Primary: New York, US (claimed) \- Alternative: Frankfurt am Main, DE (observed via AlienVault OTX) \- Geo Validation: Plausible but inconsistent \- Distance from claimed location: 296.5 km \- RTT: Average 104.4ms **Infrastructure Status:** \- Open Ports: None detected \- DNS Records: No PTR records, no forward resolution \- TLS Certificates: None \- Services: No HTTP/HTTPS services \--- \## Threat Indicators **Blacklist Status:** \- Total DNSBL Lists: 8 \- Listed Count: 1 (low-severity listing) \- Pulsedive Risk: Not applicable **Campaign Correlation:** \- Known Campaigns: None \- Certificate Matches: 0 \- Correlated IPs: 0 **Behavioral Analysis:** \- Honeypot Hits: 0 \- Enumeration Strikes: 0 \- WAF Violations: 0 \- Total Incidents: 0 \--- \## Neighborhood Analysis (45.86.202.0/24) **Subnet Overview:** \- Total Siblings: 69 \- Active Siblings: 18 \- Threat Siblings: 17 \- Abuse Density: 0.2464 (24.64%) \- Classification: Mixed **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 1 \- Low Risk: 67 The /24 subnet shows moderate abuse density with 17 threat siblings out of 69 total IPs. This suggests the subnet is a shared hosting or firewall infrastructure with elevated but not critical abuse levels. \--- \## Observation History **Monitoring Period:** 12 observations recorded **Latest Activity:** 2026-07-27 **Key Historical Signals:** 1. **Traceroute:** 13 hops completed, reached target (Comcast transit) 2. **Geolocation:** Consistent RTT ~104ms, distance 296.5km from claimed coordinates 3. **Abuse Density:** Stable at 0.2464, mixed classification maintained 4. **Blacklist Activity:** 1 high-severity listing detected **Temporal Analysis:** \- No ownership changes detected \- Threat persistence: 0 days \- Is persistently malicious: No \--- \## Relationships Graph **Connected Entities:** None detected \- No linked hostnames \- No associated organizations \- No related certificates \--- \## Recommended Actions **Current Status:** NO ACTION REQUIRED No automated firewall rules or blocking recommendations are generated at this time. The IP's low risk score (25/100) and firewalled status indicate it poses minimal threat to your infrastructure. \--- \## Analyst Notes 1. **Geolocation Discrepancy:** IP reports US location but traffic patterns suggest European origin. Investigate if this affects your security controls. 2. **Subnet Context:** 17 threat siblings in /24 subnet warrant monitoring. Consider adding subnet-level rules if your organization blocks the broader 45.86.202.0/24 range. 3. **Blacklist Listing:** 1 out of 8 DNSBL lists contains this IP. Review the specific list source and determine if blocking is warranted. 4. **Infrastructure Role:** Firewalled status suggests this IP may be an edge firewall or gateway device. Legitimate traffic patterns expected. \--- **Classification:** UNCLASSIFIED **Distribution:** SOC Team, Network Operations ## Nearby addresses - 45.86.202.1 (https://ipdebrief.com/45.86.202.1) - 45.86.202.2 (https://ipdebrief.com/45.86.202.2) - 45.86.202.4 (https://ipdebrief.com/45.86.202.4) - 45.86.202.5 (https://ipdebrief.com/45.86.202.5) - 45.86.202.6 (https://ipdebrief.com/45.86.202.6) - 45.86.202.8 (https://ipdebrief.com/45.86.202.8) - 45.86.202.9 (https://ipdebrief.com/45.86.202.9) - 45.86.202.11 (https://ipdebrief.com/45.86.202.11) - 45.86.202.12 (https://ipdebrief.com/45.86.202.12) - 45.86.202.13 (https://ipdebrief.com/45.86.202.13) - 45.86.202.14 (https://ipdebrief.com/45.86.202.14) - 45.86.202.18 (https://ipdebrief.com/45.86.202.18) --- Source: IPDebrief, "45.86.202.77 IP intelligence", https://ipdebrief.com/45.86.202.77, updated 2026-10-07. Assessments are probabilistic.