23.129.64.151📋 Copy

IP Intelligence Briefing: 23.129.64.151

Date: 2026-06-13

---

**1. Profile Summary**

• Risk Score: 70 (High Risk)
• Ownership: Emerald Onion (ASN 396507)
• Geolocation: Seattle, WA, US (inferred via geolocation signals)
• Threat Indicators:

- Tor exit node activity detected

- Listed in 4 DNSBLs (darklists)

• Network Role: Tor exit node (classified as "Web Server" with open ports 80/443)
• Services:

- TLS certificate with issuer *www.ifnwg2rhzdsta3zkb.com* and subject *www.rvprsyx2i2.net*

- No HTTP title or server banner observed

---

**2. Observation History**

• Recent Activity (Last 30 Days):

- Persistent signals (41 total observations) with confidence ranging 0.35–0.85.

- High-risk categorization in 4/8 DNSBL lists (e.g., Spamhaus, Project Honey Pot).

- BGP route stability confirmed; no recent route changes.

• Geolocation Consistency:

- Inferred as Seattle, WA, US (2500km accuracy radius).

- No geo-validation violations detected.

---

**3. Relationships & Network Context**

• Linked Entities:

- Same network: EMERALD-ONION-TOR1 (repeated 64x in relationships).

- No direct connections to known malicious organizations or domains.

• Subnet Analysis (23.129.64.0/24):

- Abuse Density: 47.42% (18 inherited risk points).

- High-Risk Neighbors: 11 IPs with ≥70 risk scores (e.g., 23.129.64.99, 23.129.64.130).

- Total Siblings: 97 IPs (96 active).

---

**4. Threat Assessment**

• Malicious Activity:

- Strong indicators of Tor exit node misuse (high-risk score, DNSBL listings).

- No direct evidence of active exploitation (e.g., malware, phishing).

• Persistence:

- Observed for 1 day (threatObservationCount: 1).

- No persistent malicious behavior detected.

---

**5. Recommended Actions**

• Monitoring:

- Continuously monitor for new connections or traffic anomalies.

- Track changes in DNSBL listings or BGP route stability.

• Network Segmentation:

- Consider isolating traffic from this subnet (23.129.64.0/24) if sensitive services are exposed.

• Threat Intelligence:

- Cross-reference with Tor exit node lists for correlation with other threats.

---

Conclusion:

23.129.64.151 is a high-risk Tor exit node associated with Emerald Onion, linked to multiple DNSBL listings. While no direct malicious activity is observed, its role as a Tor exit node and high-risk subnet neighbors warrant close monitoring. No immediate blocking is recommended unless further malicious behavior is detected.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.