170.187.142.180
IP 170.187.142.180 resided within Linode’s cloud infrastructure (ASN 63949) located in Atlanta, Georgia. The asset registered a risk score of 25, classified as Low Risk. Network scans identified open ports 80, 443, and 22, serving Apache HTTP and SSH services under the domain galleonsupport.com. While the threat actor profile categorized the host as "Suspicious Host," no specific attack indicators, blacklist entries, or active incidents were recorded during observation. The subnet (170.187.142.0/24) exhibited a mostly clean classification with one threat sibling. Analysts recommended monitoring the asset with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 170.187.128.0/17 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 170-187-142-180.ip.linodeusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 170-187-142-180.ip.linodeusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 0/4 domains |
| DMARC | 0/4 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10 |
🔐 TLS Certificate
| SANs | galleonsupport.com |
| Valid From | 2026-07-28T18:18:55+00:00 |
| Valid Until | 2026-10-26T18:18:54+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 06ABF96A5F5DD57C22A365913F1E6B7E068F |
| Thumbprint | 798BC751061C5CED77A38637F94A9B59013D9B7D |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 30% | 3 | 4 |
| services | 27% | 2 | 3 |
| ownership | 35% | 3 | 5 |
| reputation | 22% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 28% | 13 | 22 |
| Data Coherence | Consistent (100%) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 08:56:01 UTC |
| Last Seen | 2026-09-23 03:52:30 UTC |
| Profile Built | 2026-09-23 04:11:58 UTC |
| Data Freshness | Live |
| Signal Types | 30 |
| Total Observations | 45 |
Full dossier details are available via our API.