64.62.197.8📋 Copy

# IP Intelligence Briefing: 64.62.197.8

## Executive Summary

IP address 64.62.197.8 presents a moderate risk profile (score: 40) with no active threat indicators. The address is associated with Comcast (ASN 6939) and located in California, US. The subnet exhibits low abuse density, and the IP shows no persistent malicious behavior. No immediate blocking is required, though neighborhood monitoring is recommended.

## Network Profile

Risk Assessment: Moderate Risk (Score: 40)

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• DNSBL Listings: 2 of 8 total lists

Geolocation:

• Country: United States (US)
• Region: California (CA)
• City: Boston
• Coordinates: 36.78, -119.42
• Accuracy Radius: 200km
• Geo Consensus: True

Network Classification:

• Infrastructure Type: Firewalled / No Services
• Open Ports: None detected
• Services: No HTTP/TLS endpoints active
• Not classified as CDN, hosting, proxy, VPN, or Tor exit node

Control Plane Data:

• Origin ASN: 6939 (Comcast)
• BGP Prefix: 64.62.128.0/17
• Route Stability: Unstable
• DNSSEC Valid: Yes
• RPKI State: Not assessed

## Observation History

The IP accumulated 16 signal observations with the following characteristics:

Recent Ownership Signals (2026-07-29):

• Organization: The Shadowserver Foundation, Inc.
• Abuse Contact: abuse@shadowserver.org
• RIR: ARIN
• CIDR: 64.62.197.0/24

Geolocation Signals:

• Multiple sources reported US location with confidence ranging 0.35-0.95
• Coordinates varied across sources (36.78, -119.42 to 37.751, -97.822)

Operator Assessment:

• Operator Score: 0.1304 (Minimal risk)
• Signal Count: 3 of 8 maximum signals

Temporal Analysis:

• Ownership Changes: 0
• Threat Observation Count: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: False

## Relationship Graph

Only DNS associations were identified:

• Reverse DNS: 8.0-24.197.62.64.in-addr.arpa
• No hostname, organization, or certificate relationships detected
• No correlated entities in relationship graph

## Neighborhood Analysis (64.62.197.0/24)

Subnet Overview:

• Classification: Clean
• Abuse Density: 0.04 (4%)
• Total Siblings: 143
• Active Siblings: 61
• Threat Siblings: 6

Risk Distribution:

• High Risk: 4 IPs
• Medium Risk: 23 IPs
• Low Risk: 66 IPs

Notable High-Risk Neighbors:

• 64.62.197.2: Risk Score 55, Authority Score 50
• 64.62.197.3: Risk Score 40, Authority Score 50
• 64.62.197.5: Risk Score 15, Authority Score 50

## Threat Indicators

• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0

## Recommended Actions

No immediate firewall rules or blocking recommended. The IP demonstrates no active malicious indicators and moderate risk is attributed to network classification factors rather than threat activity.

Monitoring Recommendations:

• Continue passive observation of the /24 subnet
• Monitor the 6 high-risk neighbors for potential correlation
• No active threat intelligence indicators require immediate action

---

*Intel generated: 2026-07-29*

*Classification: Defensive Security Intelligence*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.