172.105.39.172📋 Copy

# IP Intelligence Briefing: 172.105.39.172

## Executive Summary

The IP address 172.105.39.172 operates on Linode cloud infrastructure and maintains a low-risk profile. No active threat indicators were observed across all monitoring channels. The IP is classified as Low Risk with a risk score of 25.

## Infrastructure Profile

• Organization: Linode (ASN 63949)
• Infrastructure Type: Cloud Compute
• CIDR Block: 172.104.0.0/16
• Network Registration: ARIN
• Control Plane: Route stable with BGP path 7018 6453 4755 20940 63949
• DNS Resolution: 172-105-39-172.ip.linodeusercontent.com (forward confirmed)
• Service Status: Firewalled / No Services detected (no open ports)
• TLS/HTTP: No certificates or HTTP services detected

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Known Campaigns: None
• Threat Feeds: No matches
• Blacklist Status: 1 listing out of 8 total DNSBL checks
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## Geolocation Data

• Country: US (Reported: Maharashtra, Mumbai)
• Note: Geographic validation shows ICMP blocked; validation unable to confirm exact location. Distance metric indicates 6,738.2 km discrepancy from claimed coordinates.

## Neighborhood Analysis

• Subnet: 172.105.39.0/24
• Abuse Density: 0.5 (Moderate)
• Classification: Mostly Clean
• Neighbor Count: 1
• Threat Siblings: 1 identified
• Neighbor Risk: 172.105.39.145 (Risk Score: 25)

## Historical Signals

Analysis of 26 historical observations reveals:

• BGP Stability: Consistent routing with no route changes in 30 days
• ASN Age: 4,143 days (Linode ASN allocated 2015-02-16)
• Recent Activity: Minimal routing signals observed in June 2026
• Threat Persistence: No persistent malicious activity detected

## Relationship Graph

• DNS Associations: Resolves to Linode hostnames
• Network Association: LINODE
• Total Relationships: 36 (primarily DNS and network associations)

## Security Actions

No specific firewall or mitigation actions are recommended. The IP is classified as Low Risk with no active threat indicators requiring immediate intervention.

## SOC Analyst Recommendations

1. Monitor: Track the neighborhood IP 172.105.39.145 for any escalation in risk profile

2. Baseline: Establish connection patterns for this Linode infrastructure asset

3. Review: Re-evaluate if the 1 DNSBL listing warrants further investigation

4. Traffic Analysis: No blocking required; standard cloud infrastructure traffic monitoring applies

---

*Intel generated from IPDebrief platform. Last updated: 2026-06-29*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.