64.62.156.13📋 Copy

IP Intelligence Briefing: 64.62.156.13

Date: 2026-06-12

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership:

- ASN: AS6939

- Organization: The Shadowserver Foundation, Inc.

- Subnet: 64.62.156.0/24

- Geolocation: San Jose, CA, US (Highly plausible).

• Network Role: Firewalled / No Services (no open ports or TLS certificates detected).
• Threat Indicators:

- No direct malicious activity observed.

- Subnet abuse density: 0.26 (moderate risk).

---

**2. Observation History**

• Recent Activity (2026-06-12):

- Threat Signals: 50+ pulses detected (potential malicious activity).

- DNS Listings: 1 of 8 DNSBL lists (low severity).

- Subnet Analysis: 14/53 siblings flagged as high/medium risk.

- Geolocation Consistency: Plausible (no anomalies).

---

**3. Relationships**

• Network Associations:

- Linked to HURRICANE-CE2897-4295868A (same subnet).

- DNS reverse lookup: `13.0-24.156.62.64.in-addr.arpa`.

• No Known Campaigns or Certificates: No malicious domains or TLS certs detected.

---

**4. Neighborhood Analysis**

• Subnet: 64.62.156.13/24 (53 IPs total).
• Risk Distribution:

- High Risk: 1 IP (64.62.156.10, score 55).

- Medium Risk: 23 IPs.

- Low Risk: 28 IPs.

• Abuse Density: 1.9% (low overall, but elevated due to high-risk neighbors).

---

**5. Recommendations**

• Monitor Subnet: Elevated risk in the subnet (1 high-risk neighbor).
• Verify DNS: Confirm ownership of `13.0-24.156.62.64.in-addr.arpa`.
• Network Segmentation: Ensure firewalled infrastructure is isolated from public networks.
• Continuous Monitoring: Track changes in the subnet’s abuse density and threat signals.

Conclusion: This IP is associated with a security organization but resides in a subnet with mixed risk. While no direct threats are detected, the presence of high-risk neighbors warrants closer scrutiny.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.