# 64.62.197.235 — IP Intelligence Summary 64.62.197.235 is an IPv4 address operated by The Shadowserver Foundation, Inc. (AS6939), geolocated to Boston, United States. Its reverse DNS name is 235.0-24.197.62.64.in-addr.arpa. As of October 5, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/64.62.197.235 - Last updated: 2026-10-05 ## Ownership - Organization: The Shadowserver Foundation, Inc. - Network name: HURRICANE-CE2897-4E693F5B - Allocated block: 64.62.197.0/24 - ASN: AS6939 (https://ipdebrief.com/asn/6939) - Regional registry: ARIN ## Location - City: Boston - Region: CA - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - 235.0-24.197.62.64.in-addr.arpa - Forward-confirmed: yes ## Analyst narrative **INTELLIGENCE BRIEFING: IP 64.62.197.235/32** **SUBJECT:** Network Intelligence Assessment **DATE:** 2026-07-23 **IP ADDRESS:** 64.62.197.235 **RISK CLASSIFICATION:** LOW RISK (Score: 0) \--- \### EXECUTIVE SUMMARY IP address 64.62.197.235 is classified as Low Risk and is operated by The Shadowserver Foundation, Inc. (ASN 6939). The IP shows no malicious indicators, no blacklisting, and belongs to a subnet with clean overall classification. No immediate threat action is recommended. \--- \### OWNERSHIP & NETWORK CLASSIFICATION \- **Organization:** The Shadowserver Foundation, Inc. \- **ASN:** 6939 (Hurricane Electric) \- **CIDR Block:** 64.62.197.0/24 \- **Network Role:** Infrastructure/Firewalled (no active services detected) \- **Registration:** ARIN registry \- **Abuse Contact:** abuse@shadowserver.org The IP is assigned to a known security research and abuse mitigation organization. The network infrastructure type indicates a defensive posture with no exposed services. \--- \### GEOLOCATION DATA \- **Country:** United States (US) \- **Region:** California (CA) \- **City:** Boston (reported coordinates: 36.78°N, -119.42°W) \- **Timezone:** America/Los_Angeles \- **Geo Validation:** Plausible consensus across sources \--- \### THREAT ASSESSMENT **Current Risk Profile:** \- Risk Score: 0 (Low Risk) \- Abuse Confidence Score: Not applicable \- Blacklist Count: 0 \- Known Attacker: No \- Spam Source: No \- Tor Exit Node: No \- Known Campaigns: None **Threat Indicators:** \- No threat feed matches \- No known malicious campaigns \- Zero persistent malicious activity detected \- Threat observation count: 0 \--- \### NEIGHBORHOOD ANALYSIS (64.62.197.0/24) \- **Total Siblings:** 129 IPs \- **Active Siblings:** 43 IPs \- **Abuse Density:** 0.031 (Low) \- **Classification:** Clean \- **Threat Siblings:** 4 out of 129 total **Risk Distribution in Subnet:** \- High Risk: 3 IPs \- Medium Risk: 21 IPs \- Low Risk: 76 IPs The IP's immediate neighborhood shows minimal abuse concentration. This IP (64.62.197.235) maintains a risk score of 0, significantly below the subnet average. \--- \### OBSERVATION HISTORY **Total Historical Observations:** 18 **Recent Activity Timeline:** \- 2026-07-23 17:42:37 – Subnet classification: Clean, Abuse Density: 0.031 \- 2026-07-23 17:42:28 – Network role: Infrastructure, No proxy/VPN/Cloud indicators \- 2026-07-23 17:41:22 – Ownership stable, no persistence \- 2026-07-23 17:39:33 – Organization confirmed: The Shadowserver Foundation, Inc. **Temporal Analysis:** \- Ownership changes: 0 \- Threat persistence days: 0 \- Is persistently malicious: No The IP has maintained consistent low-risk behavior with no degradation in reputation over the observation period. \--- \### TECHNICAL DETAILS **DNS Configuration:** \- Reverse DNS: 235.0-24.197.62.64.in-addr.arpa \- Forward Resolution: Not confirmed \- Hosted Domains: 0 \- Email Auth (SPF/DMARC): Not configured **Service Detection:** \- Open Ports: None detected \- TLS Certificate: None \- HTTP Title/Server Banner: None \- Service Purpose: Firewalled / No Services **Control Plane:** \- Origin ASN: 6939 \- BGP Prefix: 64.62.128.0/17 \- Route Stability: Variable \- DNSSEC: Valid \- DNSBL Listed: 0/8 total lists \--- \### RELATIONSHIP GRAPH \- **Network Associations:** HURRICANE-CE2897-4E693F5B (Hurricane Electric) \- **DNS Associations:** 235.0-24.197.62.64.in-addr.arpa \- No anomalous relationships to malicious entities or known bad actors detected. \--- \### RECOMMENDATIONS & ACTIONS **Security Actions:** None Required The IP address presents no threat to defensive operations. No firewall rules, blocking, or monitoring actions are recommended based on current risk assessment. **Contextual Note:** This IP belongs to The Shadowserver Foundation, a legitimate security research organization that operates abuse monitoring systems and maintains incident data. Traffic from this IP should generally be permitted unless specific correlation with known threats occurs. \--- **ANALYST NOTES:** This assessment is based on real-time IP intelligence data. The Shadowserver Foundation network is commonly used for threat monitoring and abuse reporting. While no threat indicators were identified, maintain awareness of the subnet's 4 known threat siblings when analyzing traffic patterns. **END OF BRIEFING** ## Nearby addresses - 64.62.197.2 (https://ipdebrief.com/64.62.197.2) - 64.62.197.3 (https://ipdebrief.com/64.62.197.3) - 64.62.197.4 (https://ipdebrief.com/64.62.197.4) - 64.62.197.5 (https://ipdebrief.com/64.62.197.5) - 64.62.197.8 (https://ipdebrief.com/64.62.197.8) - 64.62.197.9 (https://ipdebrief.com/64.62.197.9) - 64.62.197.12 (https://ipdebrief.com/64.62.197.12) - 64.62.197.13 (https://ipdebrief.com/64.62.197.13) - 64.62.197.14 (https://ipdebrief.com/64.62.197.14) - 64.62.197.15 (https://ipdebrief.com/64.62.197.15) - 64.62.197.16 (https://ipdebrief.com/64.62.197.16) - 64.62.197.17 (https://ipdebrief.com/64.62.197.17) --- Source: IPDebrief, "64.62.197.235 IP intelligence", https://ipdebrief.com/64.62.197.235, updated 2026-10-05. Assessments are probabilistic.