172.105.196.92📋 Copy

# IP INTELLIGENCE BRIEFING: 172.105.196.92/32

Classification: Low Risk Cloud Infrastructure

Date of Analysis: 2026-08-06

---

## EXECUTIVE SUMMARY

IP address 172.105.196.92 operates as a Linode cloud compute instance with a risk score of 25 (Low Risk). No active threat indicators detected. The IP is associated with legitimate cloud hosting infrastructure in Tokyo, Japan, with minimal operator-level risk signals.

---

## OWNERSHIP & INFRASTRUCTURE

• Provider: Linode (ASN 63949)
• Organization: LINODE
• CIDR Block: 172.105.148.0/22
• Infrastructure Type: Cloud Compute
• IP Classification: Cloud-hosted, firewalled configuration

---

## GEOLOCATION DATA

• Primary Location: Tokyo, Japan (JP)
• Geographic Consensus: Validated across multiple sources
• Note: ICMP validation blocked; distance metrics indicate 9,212.3km from probe origin

---

## THREAT ASSESSMENT

• Risk Score: 25 (Low Risk)
• Blacklist Status: 0 blacklist entries
• Abuse Confidence: Not applicable
• Tor Exit/Proxy/VPN: None detected
• Known Campaigns: None associated
• Threat Feeds: No active indicators

---

## NETWORK PROFILE

• Open Ports: None detected
• TLS Certificate: Not present
• DNS Records: No PTR hostnames, no forward resolution
• Email Authentication: SPF/DMARC not configured
• Service Purpose: Firewalled / No Services

---

## NEIGHBORHOOD ANALYSIS (172.105.196.0/24)

• Subnet Abuse Density: 0.5 (Low)
• Classification: Mostly Clean
• Active Siblings: 1
• Neighboring IP: 172.105.196.91 (Risk Score: 25, Authority Score: 60)
• High/Medium Risk Neighbors: 0

---

## OBSERVATION HISTORY

• Total Observations: 17 signals recorded
• Recent Activity: 2026-08-06
• Threat Persistence: 0 days
• Malicious Classification: Not persistently malicious
• Ownership Stability: No changes observed

---

## CONTROL PLANE ANALYSIS

• Operator Score: 0.1304 (Minimal)
• DNSBL Listed: 1 of 8 total lists
• Route Stability: False
• BGP Prefix: 172.105.192.0/19
• RPKI/IRR: Status not applicable

---

## RECOMMENDED ACTIONS

Status: No immediate action required

The IP demonstrates characteristics of legitimate cloud infrastructure with no active threat indicators. Standard cloud hosting security controls apply. No firewall rules or blocking recommendations generated.

---

## INTELLIGENCE CONCLUSION

This IP address represents routine cloud compute infrastructure from Linode with no malicious activity detected. The low risk score, absence of threat indicators, and clean neighborhood profile support classification as benign cloud hosting. No SOC alerting or blocking recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.