172.104.55.33📋 Copy

IPDEBRIEF INTELLIGENCE BRIEFING

Target: 172.104.55.33/32

Classification: Cloud Infrastructure IP – Moderate Risk

---

PROFILING SUMMARY

The target IP address 172.104.55.33 belongs to Linode (AS63949), a cloud hosting provider operating from Singapore. The IP is classified as cloud compute infrastructure with a risk score of 50 (Moderate Risk). DNS resolution confirmed the address resolves to 172-104-55-33.ip.linodeusercontent.com with forward confirmation verified. No open ports or active services were detected on the target.

OWNERSHIP & INFRASTRUCTURE

THREAT ASSESSMENT

The IP maintains a moderate risk profile with no active threat indicators detected. The address is not classified as a Tor exit node, known attacker, or spam source. The control plane indicates the IP is listed on 8 DNSBLs, with 2 listings flagged as high severity. No known malware campaigns correlate with this address.

NEIGHBORHOOD ANALYSIS

The /24 subnet (172.104.55.0/24) contains 2 active sibling IPs with an abuse density of 0. One neighboring IP (172.104.55.192) also carries a risk score of 50 with an authority score of 60. The subnet is classified as clean with no inherited threat risk.

OBSERVATION HISTORY

Historical analysis returned 23 observations. Key temporal signals indicate subnet abuse density fluctuated between 0 and 0.5 during the observation window. Routing stability remains inconsistent, with route changes recorded within the 30-day period. Geolocation data consistently validated Singapore location with RTT measurements between 246-260ms.

RELATIONSHIP MAPPING

The IP exhibits 18 relationships, primarily DNS associations to the Linode hostname and network associations to the LINODE organization. No unique certificate subjects or correlated external IPs were identified in the relationship graph.

RECOMMENDED ACTIONS

Based on the moderate risk profile, the following actions are recommended:

• Firewall: Block traffic to/from 172.104.55.33/32
• iptables: `iptables -A INPUT -s 172.104.55.33 -j DROP`
• Cloudflare WAF: Block with expression `ip.src eq 172.104.55.33`
• AWS WAF: Add address `172.104.55.33/32` to block list

INTELLIGENCE JUDGMENT

The IP address 172.104.55.33 represents cloud infrastructure from Linode Singapore with moderate risk scoring driven by DNSBL listings. While no active threat indicators were identified, the DNSBL associations warrant traffic filtering. The neighborhood contains similarly scored IPs, suggesting this subnet may be underutilized or experiencing elevated baseline risk. Recommend monitoring for any escalation in threat indicators or abuse activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.