Intelligence Briefing: 172.233.147.105
Risk Assessment: The address was classified as Low Risk with a risk score of 20. No known malicious indicators, blacklists, or reputation sources were associated with the IP.
Ownership and Geolocation: Ownership records identified Linode (ASN 63949) within the 172.232.0.0/13 CIDR block. Geolocation data placed the infrastructure in Los Angeles, California, United States.
Network Services: Active ports included TCP 80 (HTTP), TCP 443 (HTTPS), and TCP 22 (SSH). The SSH banner reported SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18.
DNS and Identity: PTR records resolved to 172-233-147-105.ip.linodeusercontent.com under the linodeusercontent.com domain. Forward resolution was confirmed.
Infrastructure Role: The network role was identified as Cloud Compute with hosting capabilities enabled. No proxy, CDN, Tor, or mobile carrier activity was detected.
Conclusion: The profile indicated standard cloud server behavior with no immediate threat activity. Routine monitoring of web and SSH traffic was advised.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 172.232.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 172-233-147-105.ip.linodeusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 172-233-147-105.ip.linodeusercontent.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 1/3 domains |
| DMARC | 0/3 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 3 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache/2.4.58 (Ubuntu) |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
π TLS Certificate
| SANs | blazyenterprises.duckdns.orgtbg-studios.comwww.blazyenterprises.duckdns.orgwww.tbg-studios.com |
| Valid From | 2026-08-03T06:48:19+00:00 |
| Valid Until | 2026-11-01T06:48:18+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 0676AF330D01B075BC5B79A0BAF8363E2F01 |
| Thumbprint | 0444FDAB420BFBC9DBEBA2D601BBE470AA65C655 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 1 | 1 |
| routing | 17% | 1 | 1 |
| services | 35% | 2 | 3 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 1 |
| geolocation | 24% | 2 | 2 |
| Overall | 24% | 9 | 11 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-14 01:09:23 UTC |
| Last Seen | 2026-08-29 16:30:26 UTC |
| Profile Built | 2026-08-30 22:28:50 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 24 |
Full dossier details are available via our API.