45.92.229.18📋 Copy

## IP Intelligence Briefing: 45.92.229.18/32

Executive Summary

IP 45.92.229.18 presents a low-risk profile (score: 25) with minimal threat indicators. The address is registered to a consumer VPN service in the New York, US region and demonstrates typical residential VPN behavior with no active open services.

---

Network Classification & Ownership

• ASN: 206092 (SECFIREWALLAS - F.N.S. HOLDINGS LIMITED)
• Organization: VPN Consumer New York City, United States of America
• Network Block: 45.92.229.0/24
• RIR: ARIN
• Geolocation: New York, US (America/New_York timezone)
• Network Role: Firewalled / No Services

---

Threat Assessment

The IP exhibits low-risk characteristics with the following observations:

Threat Indicators:

• Overall Risk Score: 25 (Low Risk)
• No known attacker reputation
• No Tor exit node activity
• No known spam source designation
• Blacklist count: 1 listing detected

Control Plane Analysis:

• DNSSEC validation: Enabled
• Route stability: Unstable (route changes observed)
• DNSBL listing: 1 of 8 total lists
• Origin ASN: 206092

---

Neighborhood Analysis

The 45.92.229.0/24 subnet demonstrates minimal abuse density with a benign operational profile:

• Total Neighbors: 63
• Risk Distribution: 0 high-risk, 4 medium-risk, 57 low-risk
• Abuse Density: 0
• Authority Scores: Consistently 50 across observed neighbors

Notable neighbors include 45.92.229.17, 19, 22, 24, and 33, all maintaining risk scores of 25 or 0 with authority scores of 50.

---

Observation History

Analysis of 12 historical observations reveals:

• Most Recent: 2026-07-29T17:45:40 UTC
• Network Classification: Residential VPN (is_vpn: false, is_residential: false)
• DNSSEC Status: Valid
• Blacklist Signals: 8 total lists, 1 active listing with high severity designation
• ASN Propagation: Consistent registration under 45.92.229.0/24

---

Technical Services Assessment

• Open Ports: None detected
• HTTP Services: Inactive
• TLS Certificates: None
• Reverse DNS: No PTR records resolved
• Forward Resolution: No domain associations

---

Recommended Actions

SOC Analyst Guidance:

• Monitor: Continue monitoring for changes in blacklist status
• Allow: Traffic from this IP may be legitimate consumer VPN usage
• Block: Not recommended at this time; risk profile remains low

Firewall Rules: No restrictive rules required. The IP demonstrates normal residential VPN behavior with no evidence of malicious activity.

---

Intelligence Confidence

Based on comprehensive profile analysis, neighborhood context, and historical observation data, the threat assessment indicates this IP represents legitimate consumer VPN traffic with no actionable threat indicators.

Classification: LOW RISK

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.