64.31.55.45📋 Copy

# IP Intelligence Briefing: 64.31.55.45/32

Classification: Low Risk / Single-Service Host

Date: 2024-01-XX

Analysis Period: Current observation window

---

## Executive Summary

IP address 64.31.55.45 is a low-risk (score: 25) residential/static IP assigned to a private customer within the LSN-DLLSTX-1 network block (64.31.55.0/24). The address shows no evidence of malicious activity, campaign association, or blacklist inclusion. Current operations indicate legitimate single-service hosting with one notable open port.

---

## Network Ownership & Geolocation

• ASN: 46475
• Organization: Private Customer
• Netblock: 64.31.55.40/29
• Location: Los Angeles, California, US
• DNS Domain: lstn.net
• Reverse DNS: 45-55-31-64.static.reverse.lstn.net

The IP is classified as a Single-Service Host with no cloud, CDN, proxy, or hosting infrastructure characteristics.

---

## Threat Indicators

• Risk Score: 25/100 (Low)
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not reported

---

## Service & Port Analysis

Active Services:

• Port 3389/TCP (RDP) - Remote Desktop Protocol

Security Observations:

• SPF record present
• DMARC record: Not configured
• TLS certificate: Not detected
• HTTP title: Not detected

---

## Historical Behavior

Analysis of 21 observation signals indicates stable network behavior:

• No ownership changes detected
• No persistent malicious activity
• No threat observation count accumulation
• Recent scans show standard residential/service host patterns
• Average ownership duration: Not established

---

## Subnet Neighborhood Analysis

Subnet: 64.31.55.45/24

• Abuse Density: 0.5 (Moderate)
• Classification: mostly_clean
• Inherited Risk: 5/100

Neighbor Distribution:

The /24 subnet shows 3 active siblings with low risk profiles. One neighbor (64.31.55.55) shares the same risk score of 25.

---

## Relationship Graph

• Network Association: LSN-DLLSTX-1
• DNS Associations: 45-55-31-64.static.reverse.lstn.net (multiple records)
• No certificate associations
• No correlated IPs in campaigns

---

## Control Plane Data

• BGP Prefix: 64.31.55.0/24
• Origin ASN: 46475
• Route Stability: False
• RPKI State: Not reported
• DNSSEC Valid: True
• DNSBL Listed: 1 of 8 total lists

---

## Recommended Actions

Current Risk Level: Low

Recommended Response: No immediate action required

Monitoring Considerations:

• Monitor RDP port (3389) for unauthorized access attempts
• Standard residential IP monitoring protocols apply
• No blocking or rate-limiting recommendations based on current risk profile

---

## Intelligence Assessment

This IP represents a legitimate residential or static service address with minimal threat indicators. The presence of an open RDP port warrants standard monitoring but does not indicate malicious activity. The subnet context (mostly_clean classification, low abuse density) and lack of historical malicious behavior support continued monitoring without elevated threat response.

Confidence Level: High

Last Updated: Current observation cycle

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.