172.104.28.175📋 Copy

Intelligence Briefing: IP 172.104.28.175/32

Classification: Legitimate Infrastructure

Reputation: Low Risk (Risk Score: 0)

Ownership and Geolocation:

The address was registered to Linode (ASN 63949) under the organization LINODE within the ARIN registry. Geolocation data placed the endpoint in Hanover, New Jersey, United States. The network role was identified as CloudCompute hosting.

Technical Services:

Active services included HTTP (80), HTTPS (443), and SSH (22). Server banners indicated Apache web service. A Let's Encrypt TLS certificate was observed with the subject domain `ntp-time-server.com`. DNS records confirmed forward resolution to `172-104-28-175.ip.linodeusercontent.com`.

Threat Assessment:

No indicators of compromise, blacklisting, or known campaign associations were detected. Abuse confidence scores remained null, and the blacklist count was 0. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or active attacker activity. The system was not flagged as a known attacker or spam source.

Recommendation:

Analysis recommended allowing traffic with info-level severity. Forward-confirmed reverse DNS and consistent coherence scores supported the classification. No specific firewall rules were required based on current threat data.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.