172.233.80.237📋 Copy

# IP Intelligence Briefing: 172.233.80.237

## Executive Summary

IP address 172.233.80.237 is a Linode cloud compute infrastructure host classified as Low Risk (Risk Score: 25). The asset demonstrates stable operational characteristics with no persistent malicious activity detected across 21 observation cycles. No immediate security actions are recommended based on current threat intelligence.

## Ownership and Infrastructure

Provider: Linode (ASN: 63949)

Infrastructure Type: CloudCompute / Hosting

Network Role: Single-Service Host

CIDR Block: 172.233.64.0/19 (BGP Prefix)

The IP operates within Linode's cloud infrastructure and forwards to linodeusercontent.com. PTR hostname resolves to 172-233-80-237.ip.linodeusercontent.com with forward confirmation enabled. DNSSEC is valid; no CAA records present.

## Geolocation

Country: United States (US)

Region/City: Osaka

Accuracy Radius: 2,500 km

Validation: GeoPlausible = true (2 sources, consensus achieved)

*Note: Osaka location appears inconsistent with US geolocation; may indicate routing anomaly or data source discrepancy.*

## Threat Intelligence

Overall Risk Score: 25 (Low Risk)

Abuse Confidence: Not applicable

Blacklist Status: 0 entries

Known Attacker: No

Tor Exit Node: No

Spam Source: No

Threat Indicators: None detected

Campaign Likelihood: None

Cert Matches: 0

Correlated IPs: 0

## Network Services

Open Ports:

• Port 22/SSH (TCP) – OpenSSH_9.2p1 Debian-2+deb12u10

No TLS certificates or HTTP services detected.

## Neighborhood Analysis (172.233.80.0/24)

Abuse Density: 0 (Clean)

Threat Siblings: 0

Active Siblings: 1

Classification: Clean

No neighboring IPs flagged as malicious. Subnet exhibits minimal abuse activity.

## Control Plane

Operator Score: 0.2609 (Basic)

Route Stability: Not stable

DNSBL Listed: 1 of 8 total lists

RPKI State: Not evaluated

IRR Consistency: Not evaluated

## Historical Observation Summary

Total observations: 21

Recent activity (2026-06-19) shows:

• Subnet classification: Clean
• Inherited risk: 0
• Abuse density: 0

Historical geolocation signals include observations from 2026-06-14 referencing Akamai International (AS20940), indicating potential routing diversity or CDN integration.

## Recommended Actions

No immediate firewall or blocking actions required. The IP maintains a legitimate cloud hosting profile with no evidence of malicious activity. Standard cloud infrastructure monitoring protocols apply.

---

*Intelligence compiled from IPDebrief threat intelligence platform. Data reflects current operational state as of 2026-06-19.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.