23.129.64.209📋 Copy

IP Intelligence Briefing: 23.129.64.209

*Last Updated: 2026-06-11*

---

**1. Core Profile**

• Risk Score: 15 (Low Risk)
• Ownership: Emerald Onion (Tor Exit Node)
• Geolocation: Seattle, WA, US (IPDebrief geolocation consensus)
• Network Role: Tor Exit Node (classified as "Firewalled / No Services")
• Threat Indicators: No known malicious activity, spam, or attacker associations.

---

**2. Network Behavior**

• Subnet: 23.129.64.0/24
• Subnet Risk: Mixed abuse density (28% threat siblings, 7% high-risk neighbors).
• BGP Stability: Stable routes (no recent changes).
• Routing: Valid DNSSEC, route stability confirmed.

---

**3. Historical Observations**

• Activity Trends: Minimal changes over 30 days; no persistent malicious patterns.
• Signal Consistency: Low-risk scores and no threat indicators observed.

---

**4. Relationships**

• Linked Entities:

- Tor Network: Part of "EMERALD-ONION-TOR1" network.

- ASN: 396507 (Emerald Onion).

• No Direct Associations: No linked domains, certificates, or organizations.

---

**5. Neighborhood Analysis**

• Subnet Summary:

- Total Neighbors: 97 (96 active).

- Threat Siblings: 28 IPs flagged as high/medium risk.

- Abuse Density: 0.2887 (moderate risk in subnet).

• Notable Neighbors:

- 23.129.64.99, 23.129.64.130–133 (risk scores 66–70).

---

**6. Recommendations**

• Monitoring: Track subnet for emerging threats due to mixed abuse density.
• Traffic Inspection: Consider deep packet inspection for Tor-exit node traffic.
• Firewall Rules: Block or monitor high-risk neighbors (e.g., 23.129.64.99–133).

---

Conclusion:

23.129.64.209 is a low-risk Tor exit node with no direct malicious indicators. However, its subnet contains a mix of benign and risky IPs, warranting closer scrutiny. SOC teams should focus on isolating Tor-related traffic and monitoring associated subnets for anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.