172.105.23.29📋 Copy

## IP Intelligence Briefing: 172.105.23.29/32

Classification: Low Risk — Cloud Infrastructure Node

Risk Score: 25/100

Last Updated: 2026-07-30

Executive Summary

IP 172.105.23.29 is a Linode-hosted cloud compute resource with no active services and a low-risk reputation profile. The IP is DNS-resolved to a binaryedge.ninja hostname and appears to be part of a managed infrastructure deployment. No active malicious indicators or threat associations were identified.

Infrastructure Profile

• Provider: Linode (CloudCompute)
• Infrastructure Type: Cloud Hosting
• Network Role: Firewalled / No Services
• Origin ASN: 63949
• BGP Prefix: 172.105.0.0/19
• Geolocation: Unresolved (insufficient signal data)

DNS Analysis

• PTR Hostname: prod-fluorine-ca-central-2.li.binaryedge.ninja
• Domain: binaryedge.ninja
• Forward Resolution: Confirmed
• Email Authentication: SPF enabled, DMARC not configured
• DNSSEC: Valid

Threat Indicators

• Blacklist Status: Listed on 1 of 8 DNSBL sources (high severity classification)
• Abuse Confidence Score: Not applicable
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None detected
• Threat Feeds: None

Control Plane Observations

• Operator Score: 0.2609 (Basic)
• Route Stability: Unstable (0 route changes in 30d)
• DNSBL Listings: 1 active listing
• DNSSEC: Valid

Neighborhood Assessment

• Subnet: 172.105.23.0/24
• Abuse Density: 0%
• Neighbor Risk Distribution: 4 low-risk, 0 medium-risk, 0 high-risk
• Notable Neighbors: 172.105.23.24, 172.105.23.157, 172.105.23.180, 172.105.23.239 (all risk score 20-25, authority score 60)

Relationship Graph

• DNS Associations: prod-fluorine-ca-central-2.li.binaryedge.ninja
• Organizations: None resolved
• Subnets: None resolved

Observation History

The IP has generated 10 recent observations. Key signals include:

• Network role classification as CloudCompute (Linode) with 90% confidence
• DNS resolution to binaryedge.ninja with 50% confidence
• DNSBL listing detection (high severity) with 85% confidence
• Operator scoring signal with 60% confidence

Recommended Security Actions

Block/Rate-Limit: Not recommended — Low risk profile with no active services.

Monitor: Track DNSBL listing status; monitor for service activation if previously firewalled.

Allow: Standard traffic permitted; no firewall rules required at this time.

Analyst Notes

This IP represents a cloud infrastructure node with minimal threat exposure. The single DNSBL listing appears historical and is not associated with active malicious behavior. The low-risk score (25) and absence of open services suggest this is a managed cloud resource with appropriate egress controls in place. No immediate defensive action required.

---

*Intel generated from IPDebrief platform data. All findings based on observed signals.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.