64.62.197.235📋 Copy

INTELLIGENCE BRIEFING: IP 64.62.197.235/32

SUBJECT: Network Intelligence Assessment

DATE: 2026-07-23

IP ADDRESS: 64.62.197.235

RISK CLASSIFICATION: LOW RISK (Score: 0)

---

EXECUTIVE SUMMARY

IP address 64.62.197.235 is classified as Low Risk and is operated by The Shadowserver Foundation, Inc. (ASN 6939). The IP shows no malicious indicators, no blacklisting, and belongs to a subnet with clean overall classification. No immediate threat action is recommended.

---

OWNERSHIP & NETWORK CLASSIFICATION

• Organization: The Shadowserver Foundation, Inc.
• ASN: 6939 (Hurricane Electric)
• CIDR Block: 64.62.197.0/24
• Network Role: Infrastructure/Firewalled (no active services detected)
• Registration: ARIN registry
• Abuse Contact: abuse@shadowserver.org

The IP is assigned to a known security research and abuse mitigation organization. The network infrastructure type indicates a defensive posture with no exposed services.

---

GEOLOCATION DATA

• Country: United States (US)
• Region: California (CA)
• City: Boston (reported coordinates: 36.78°N, -119.42°W)
• Timezone: America/Los_Angeles
• Geo Validation: Plausible consensus across sources

---

THREAT ASSESSMENT

Current Risk Profile:

• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None

Threat Indicators:

• No threat feed matches
• No known malicious campaigns
• Zero persistent malicious activity detected
• Threat observation count: 0

---

NEIGHBORHOOD ANALYSIS (64.62.197.0/24)

• Total Siblings: 129 IPs
• Active Siblings: 43 IPs
• Abuse Density: 0.031 (Low)
• Classification: Clean
• Threat Siblings: 4 out of 129 total

Risk Distribution in Subnet:

• High Risk: 3 IPs
• Medium Risk: 21 IPs
• Low Risk: 76 IPs

The IP's immediate neighborhood shows minimal abuse concentration. This IP (64.62.197.235) maintains a risk score of 0, significantly below the subnet average.

---

OBSERVATION HISTORY

Total Historical Observations: 18

Recent Activity Timeline:

• 2026-07-23 17:42:37 – Subnet classification: Clean, Abuse Density: 0.031
• 2026-07-23 17:42:28 – Network role: Infrastructure, No proxy/VPN/Cloud indicators
• 2026-07-23 17:41:22 – Ownership stable, no persistence
• 2026-07-23 17:39:33 – Organization confirmed: The Shadowserver Foundation, Inc.

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Is persistently malicious: No

The IP has maintained consistent low-risk behavior with no degradation in reputation over the observation period.

---

TECHNICAL DETAILS

DNS Configuration:

• Reverse DNS: 235.0-24.197.62.64.in-addr.arpa
• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Auth (SPF/DMARC): Not configured

Service Detection:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title/Server Banner: None
• Service Purpose: Firewalled / No Services

Control Plane:

• Origin ASN: 6939
• BGP Prefix: 64.62.128.0/17
• Route Stability: Variable
• DNSSEC: Valid
• DNSBL Listed: 0/8 total lists

---

RELATIONSHIP GRAPH

• Network Associations: HURRICANE-CE2897-4E693F5B (Hurricane Electric)
• DNS Associations: 235.0-24.197.62.64.in-addr.arpa
• No anomalous relationships to malicious entities or known bad actors detected.

---

RECOMMENDATIONS & ACTIONS

Security Actions: None Required

The IP address presents no threat to defensive operations. No firewall rules, blocking, or monitoring actions are recommended based on current risk assessment.

Contextual Note: This IP belongs to The Shadowserver Foundation, a legitimate security research organization that operates abuse monitoring systems and maintains incident data. Traffic from this IP should generally be permitted unless specific correlation with known threats occurs.

---

ANALYST NOTES:

This assessment is based on real-time IP intelligence data. The Shadowserver Foundation network is commonly used for threat monitoring and abuse reporting. While no threat indicators were identified, maintain awareness of the subnet's 4 known threat siblings when analyzing traffic patterns.

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.