172.236.151.195📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 172.236.151.195/32

Classification: Low Risk Cloud Infrastructure Asset

Reporting Date: 2026-06-19

---

## EXECUTIVE SUMMARY

IP 172.236.151.195 operates as a legitimate cloud hosting infrastructure asset within the Linode network (ASN: 63949). The IP demonstrates a low-risk profile (Risk Score: 25) with no active threat indicators, minimal abuse history, and standard web hosting services. The IP is classified as "Low Risk" with a reputation consistent with legitimate cloud compute usage.

---

## OWNERSHIP & GEOLOCATION

The IP resolves to standard Linode cloud infrastructure hosting. Geolocation data is consistent with the claimed Singapore location (10,382.9 km from probe origin), with an average RTT of 253ms.

---

## NETWORK SERVICES & FINGERPRINTING

• Open Ports: 80/tcp (HTTP), 443/tcp (HTTPS), 22/tcp (SSH)
• Web Server: nginx/1.24.0 (Ubuntu)
• TLS Certificate: Let's Encrypt (CN=E8, O=Let's Encrypt, C=US)
• Certificate Subject: adflownexus.com
• DNS PTR: 172-236-151-195.ip.linodeusercontent.com
• HTTP Status: 301 (Redirect)
• HTTP/2: Enabled

---

## THREAT INDICATORS

• Abuse Confidence Score: None reported
• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Known Campaigns: None
• Threat Feeds: Empty

No active threat indicators observed. The IP shows 1 DNSBL listing out of 8 total lists checked, with a risk operator score of 0.2609 (Basic classification).

---

## OBSERVATION HISTORY

Total observations: 22

Recent Activity (2026-06-19):

• HTTP/2 enabled with 793ms time-to-first-byte
• Standard nginx headers present
• TLS handshake signals present
• No malicious banners or threat signatures detected
• 5 geolocation probes with consistent Singapore location

The IP demonstrates stable, benign web hosting behavior with no degradation or escalation in risk signals over the observation period.

---

## NEIGHBORHOOD ANALYSIS

Subnet: 172.236.151.195/24

• Abuse Density: 0
• Classification: Mostly Clean
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0
• Active Siblings: 1

The /24 subnet shows minimal abuse activity with the target IP being the primary active sibling. No correlated high-risk infrastructure in the immediate neighborhood.

---

## RELATIONSHIP GRAPH

Total relationships: 46

Key Associations:

• DNS associations to linodeusercontent.com hostnames
• Network relationships to LINODE infrastructure
• No organizational or certificate cross-references indicating malicious activity

---

## SECURITY ACTIONS

No specific firewall rules or blocking actions recommended. The IP presents as legitimate cloud infrastructure with standard services.

---

## ANALYST NOTES

This IP represents typical cloud hosting infrastructure from Linode. The Let's Encrypt certificate for adflownexus.com indicates legitimate web hosting use. The low risk score (25), absence of blacklist entries, and clean subnet classification support continued monitoring without escalation. No immediate threat intelligence warrants aggressive blocking or investigation.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.