172.236.227.56
# IP INTELLIGENCE BRIEFING
Target: 172.236.227.56/32
Classification: Low Risk - Cloud Infrastructure
Date: Current
## EXECUTIVE SUMMARY
IP 172.236.227.56 is a Linode cloud compute endpoint with a low-risk profile (Risk Score: 25). The address operates within Akamai Connected Cloud infrastructure (ASN 63949) and demonstrates minimal threat indicators. No active services, open ports, or malicious activity detected.
---
## PROFILE ANALYSIS
Ownership & Infrastructure
| Attribute | Value |
|---|---|
| **Organization** | Linode |
| **ASN** | 63949 |
| **Network Block** | 172.232.0.0/13 |
| **Location** | New York, US (US-NY) |
| **Infrastructure Type** | Cloud Compute |
| **Status** | Firewalled / No Services |
Risk Assessment
| Metric | Value |
|---|---|
| **Overall Risk Score** | 25 (Low) |
| **Abuse Confidence** | Not Applicable |
| **Blacklist Count** | 0 |
| **DNSBL Listed** | 1 of 8 lists |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
---
## NETWORK BEHAVIOR
Service & Port Analysis
- Open Ports: None detected
- TLS Certificate: None
- HTTP Banner: None
- Reverse DNS: 172-236-227-56.ip.linodeusercontent.com
- Forward Resolution: Confirmed
Routing & Control Plane
- BGP Prefix: 172.236.224.0/19
- Route Stability: Unstable
- DNSSEC: Valid
- Traceroute: 29 hops, 16 timeouts (Comcast transit)
- Honeypot Hits: None recorded
---
## OBSERVATION HISTORY (15 Signals)
Recent activity shows:
- DNSSEC Status: Valid (2026-07-29)
- ASN Confirmation: 63949 (Akamai Connected Cloud)
- Domain: linodeusercontent.com
- DNS Records: No SPF/DMARC configured
- Listings: 8 total lists, 1 current listing (max severity: high)
---
## RELATIONSHIP MAPPING
- DNS Association: 172-236-227-56.ip.linodeusercontent.com
- Network Affiliation: LINODE
---
## NEIGHBORHOOD ANALYSIS
| Metric | Value |
|---|---|
| **Subnet** | 172.236.227.56/24 |
| **Neighbor Count** | 0 |
| **Abuse Density** | 0 |
| **Threat Siblings** | None |
---
## SECURITY ACTIONS
No immediate blocking required. IP demonstrates benign cloud infrastructure characteristics.
Recommended Firewall Rules: None
Threat Intelligence: No active campaigns or correlated threats identified
---
## ANALYST NOTES
This IP address represents a legitimate Linode cloud compute endpoint with no evidence of malicious activity. The single DNSBL listing appears historical and the "high severity" designation reflects past listings rather than current risk. Infrastructure shows no open ports or active services, consistent with a properly secured cloud hosting environment. No action recommended for SOC monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 172.232.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 172-236-227-56.ip.linodeusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 172-236-227-56.ip.linodeusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u9 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 35% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 2 |
| Overall | 26% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-23 13:56:26 UTC |
| Last Seen | 2026-08-12 17:42:26 UTC |
| Profile Built | 2026-08-12 17:49:01 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.