172.235.167.8📋 Copy

# IP Intelligence Briefing: 172.235.167.8/32

## Executive Summary

IP address 172.235.167.8 is a cloud compute infrastructure endpoint hosted on Linode (ASN 63949) with a Low Risk rating (Score: 25). The IP operates as a standard web server with SSH access and shows no active threat indicators or malicious campaign associations.

## Infrastructure Profile

## Network Services

• Port 443/TCP - HTTPS (web traffic)
• Port 22/TCP - SSH (OpenSSH 7.0)

## DNS Analysis

• PTR Record: 172-235-167-8.ip.linodeusercontent.com
• Forward Resolution: Confirmed
• Hosted Domain: linodeusercontent.com
• Email Authentication: No SPF/DMARC records detected

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• Abuse Confidence: Not flagged
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Likelihood: None detected

## Historical Observations

• Total Observations: 28 signals over monitoring period
• Threat Persistence Days: 0
• Classification: Mostly Clean
• Abuse Density: 0 (subnet level)
• Persistently Malicious: No

## Neighborhood Analysis

• Subnet: 172.235.167.0/24
• Active Siblings: 1
• Threat Siblings: 0
• Subnet Abuse Density: 0 (clean)

## Recommended Actions

Status: Low Priority - No immediate blocking required

• IP operates on legitimate cloud infrastructure (Linode)
• Standard web server with SSH access
• No threat indicators or blacklist hits detected
• Consider allowing traffic with standard logging for visibility

## Intelligence Notes

This IP represents legitimate cloud hosting infrastructure. The absence of threat indicators, combined with clean neighborhood metrics and proper DNS configuration, indicates normal cloud compute usage. SOC teams may monitor for behavioral anomalies but no active threat blocking is warranted at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.