172.104.175.50📋 Copy

INTELLIGENCE BRIEFING: 172.104.175.50

Classification: Low Risk

Date of Analysis: Current

Intel Source: IPDebrief Platform

---

EXECUTIVE SUMMARY

Target IP 172.104.175.50/32 presents a low-risk threat profile (Risk Score: 25/100) associated with Linode cloud infrastructure (ASN 63949). The IP resolves to hostname na.notionx.com and demonstrates clean operational characteristics with no active threat indicators.

OWNERSHIP & INFRASTRUCTURE

The IP is assigned to Linode (ASN 63949), a cloud compute provider. Infrastructure classification indicates CloudCompute hosting with service purpose marked as "Firewalled / No Services." The control plane demonstrates route stability with BGP prefix 172.104.160.0/19 and no recent route changes in the past 30 days.

GEOGRAPHIC ATTRIBUTION

Geolocation consensus identifies Singapore (SG) with geoPlausible flag set to true. Multiple geo sources confirm this attribution with an accuracy radius of 2500km. Historical observations show occasional low-confidence US geolocation signals (confidence: 0.35), but Singapore remains the prevailing attribution.

THREAT ASSESSMENT

• Blacklist Status: 0 blacklist entries
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Abuse Confidence Score: None reported
• Campaign Likelihood: Not detected

DNS & HOSTNAME INTELLIGENCE

DNS resolution confirms forward confirmation to na.notionx.com. The IP does not host email services (no SPF or DMARC records detected). Network role indicates hosting infrastructure with no active open ports or TLS certificates observed.

NETWORK NEIGHBORHOOD ANALYSIS

Subnet 172.104.175.50/24 shows low abuse density (0.0) with classification "mostly_clean." One neighboring IP (172.104.175.234) shares the risk profile with a risk score of 25. Inherited risk from neighborhood is 5/100.

OBSERVATION HISTORY

Signal observation history contains 26 recorded observations. ASN registration dates back to 2015-02-16 (4142 days old). Recent operator scores range from 0.26 to 0.39, both labeled "Basic." One threat observation was recorded in the history, with no persistent malicious activity detected (threatPersistenceDays: 0).

RELATIONSHIP GRAPH

Forty-five relationships identified, including DNS associations to na.notionx.com and same-network associations with LINODE infrastructure.

---

RECOMMENDATIONS

No immediate firewall rules or blocking actions recommended. The IP demonstrates benign operational characteristics consistent with cloud hosting infrastructure. Routine monitoring is advised.

CONCLUSION

IP 172.104.175.50 is a low-risk cloud infrastructure endpoint with no active threat indicators. The asset operates within Linode's Singapore hosting infrastructure with stable routing and no evidence of malicious activity. SOC analysts may continue standard monitoring procedures without escalation.

---

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.