64.23.151.46📋 Copy

# IP Intelligence Briefing: 64.23.151.46/32

## Executive Summary

IP address 64.23.151.46 is a low-risk (Risk Score: 25) cloud infrastructure endpoint operated by DigitalOcean, LLC. The IP exhibits minimal operator scoring (0.2174) and is classified as a hosting/cloud compute resource. While overall threat indicators remain limited, the IP has been observed with one high-severity DNSBL listing in historical data.

## Ownership and Infrastructure

• Owner: DigitalOcean, LLC (ASN 14061)
• Network: 64.23.144.0/20 BGP prefix
• AS Path: 2914 → 14061
• Geolocation: United States (Santa Clara, CA region)
• Infrastructure Type: CloudCompute with hosting services
• Network Role: Single-Service Host

## Current Threat Assessment

• Reputation: Low Risk
• Risk Score: 25/100
• Provider Score: 0
• Authority Score: 0
• DNSBL Listings: 1 of 8 total lists (historical observation)
• Known Threat Indicators: None
• Tor Exit/Proxy/VPN: Negative across all checks

## Network Neighborhood Analysis

• Subnet: 64.23.151.0/24
• Abuse Density: 0.0
• Classification: Mostly Clean
• Sibling IPs: 1 active sibling in subnet
• Threat Siblings: 1 identified

## Observed Services

• Open Ports: SSH (TCP/22)
• SSH Banner: SSH-2.0-OpenSSH_9.7p1 Ubuntu-7ubuntu4.3
• Reverse DNS: None
• Forward Resolution: Unresolved

## Historical Signal Timeline

Total observations: 29

Key historical findings:

• 2026-06-19: Operator score observation (confidence: 0.30, label: Minimal)
• 2026-06-14: DNSBL listing observed (1 of 8 lists, severity: high)
• 2026-06-14: Geolocation signal from US (confidence: 0.65)
• 2026-06-14: Operator score (confidence: 0.60, score: 0.2174)

The IP has demonstrated persistent ownership with zero ownership changes observed.

## Control Plane Data

• Route Stability: Stable (no route changes in 30 days)
• RPKI/Irr: Not assessed
• Delegation Age: 4,978 days
• DNSSEC: Valid
• CAA Records: Present

## Recommended Actions

Based on the low-risk profile and minimal threat indicators, no immediate blocking or firewall restrictions are recommended. The IP operates within legitimate cloud infrastructure.

SOC Analyst Guidance:

1. Monitor for any escalation in DNSBL listings

2. SSH service is accessible; standard host hardening applies

3. No campaign correlation detected

4. Historical DNSBL listing warrants periodic re-evaluation

Status: Continue monitoring. No immediate threat action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.