45.146.54.23📋 Copy

# IP Intelligence Briefing: 45.146.54.23/32

## Executive Summary

IP 45.146.54.23 is classified as Low Risk (Risk Score: 25/100). The address belongs to VPN Consumer infrastructure in San Francisco, CA, with no active services, no open ports, and no threat indicators detected. No immediate security action required.

---

## Ownership & Network Classification

Classification Flags:

• Provider: No
• Infrastructure Type: Firewalled / No Services
• CDN/Cloud/Hosting/Proxy/Tor: No
• Residential: No

---

## Geolocation Data

• Country: United States (US)
• Region: California (CA)
• City: San Francisco
• Coordinates: 36.78°N, -119.42°W
• Geo Consensus: True (1 source)
• Geo Plausible: False

---

## Threat Indicators

• Blacklist Count: 0
• Abuse Confidence Score: Not available
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: None detected
• Campaigns: None correlated

DNSBL Status: Listed on 1 of 8 available lists

---

## Network Behavior

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title/Server Banner: None
• DNS Resolution: No forward resolution (forwardConfirmed: false)
• PTR Hostnames: None
• Email Auth (SPF/DMARC): Not configured

---

## Control Plane Analysis

• Route Stability: False
• Route Changes (30d): 0
• MOAS: No
• RPKI State: Not available
• IRR Consistency: Not available
• Operator Score: 0.1304 (Minimal)
• BGP Prefix: 45.146.54.0/24
• Origin ASN: 206092

---

## Neighborhood Assessment (45.146.54.0/24)

• Total Sibling IPs: 100
• Abuse Density: 0%
• Risk Distribution:

- High Risk: 0

- Medium Risk: 7 (7%)

- Low Risk: 93 (93%)

• Threat Siblings: 0
• Active Siblings: 0

The target IP scores 25/100, placing it in the lower-risk range relative to subnet peers.

---

## Historical Signal Observations

• Total Observations: 14
• Threat Observation Count: 0
• Persistence Days: 0
• Is Persistently Malicious: False
• Ownership Changes: 0

Recent signals (as of 2026-07-23) show:

• Consistent US geolocation
• No VPN/Proxy/Cloud detection
• Low confidence scores (0.21–0.85) across signals
• No significant changes in threat posture

---

## Relationships

• Same Network: SAN-FRANCISCO-CA-USA-45-146-54-0 (3 relationships)
• External Hostnames/Certificates/Organizations: None detected
• Correlated IPs: 0

---

## Security Recommendations

Current Status: No specific firewall rules or mitigation actions recommended based on current risk profile.

Context: The IP presents minimal threat characteristics:

• No open services or ports
• No active threat indicators
• Low-risk classification
• Subnet abuse density is negligible

---

## Analyst Notes

This IP address represents a VPN consumer endpoint with firewalled services. The low risk score (25/100), absence of threat indicators, and minimal operator involvement (0.1304) suggest routine consumer usage rather than malicious activity. The subnet environment (45.146.54.0/24) shows low abuse density with only 7% medium-risk peers.

SOC Action: Monitor passively; no immediate blocking required. If observed in malicious context, investigate correlated activity rather than the IP address itself.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.