172.234.218.10📋 Copy

# IP Intelligence Briefing: 172.234.218.10

## Executive Summary

IP address 172.234.218.10 is classified as Low Risk with a risk score of 25. The address is hosted by Linode (ASN 63949) in Chicago, IL, US, operating as a single-service cloud host. No active threat indicators, blacklist listings, or malicious campaign associations have been observed.

## Infrastructure Profile

• Provider: Linode (Infrastructure-as-a-Service)
• ASN: 63949
• Geolocation: Chicago, IL, United States
• Classification: Cloud hosting environment
• BGP Prefix: 172.234.192.0/19
• Route Stability: Route changes recorded in last 30 days

## DNS & Service Analysis

• PTR Record: prod39client01.academyforinternetresearch.org
• Forward Resolution: Confirmed
• Open Ports: TCP/22 (SSH) - OpenSSH 8.9p1 Ubuntu-3ubuntu0.15
• Email Authentication: SPF configured, DMARC absent

## Threat Indicators

• Blacklist Status: 0 listings
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable (insufficient data)
• Threat Feeds: No matches

## Historical Observation (25 signals)

Observation history indicates stable infrastructure classification with consistent provider identification. Most recent observation (2026-06-28) confirmed cloud hosting classification. No significant risk escalations observed over the monitoring period.

## Network Neighborhood Analysis

• Subnet: 172.234.218.10/24
• Abuse Density: 0 (low)
• Classification: Mostly clean
• Active Threat Siblings: None detected in immediate subnet

## Relationship Graph

49 relationships identified, primarily:

• DNS associations with prod39client01.academyforinternetresearch.org
• Network associations with LINODE infrastructure

## Recommended Actions

No specific firewall or blocking actions recommended at this time. The IP presents low risk characteristics consistent with legitimate cloud hosting infrastructure.

## SOC Analyst Notes

This IP represents standard cloud hosting infrastructure with proper DNS configuration. The absence of DMARC records warrants monitoring but does not indicate malicious activity. SSH service exposure is typical for cloud hosting environments and should be evaluated against organizational policy. Continue passive monitoring; no immediate threat mitigation required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.