172.237.79.209📋 Copy

IP Intelligence Briefing: 172.237.79.209

*Generated via IPDebrief analysis tools*

---

**1. Core Profile**

• Risk Score: Low Risk (25/100) | No malicious indicators detected
• Ownership: Linode (AS63949) | Cloud infrastructure provider
• Geolocation: Singapore (SG) | Geo-validation flag indicates plausible location
• Network Role: Multi-service host (CloudCompute) | Likely a server or virtual machine

---

**2. Threat & Behavior**

• Malicious Activity: No known campaigns, spam, or abuse confidence signals
• Services:

- Open ports: SSH (22/TCP), HTTP-alt (8080/TCP)

- No TLS certificates or HTTP banners detected

• DNS:

- PTR hostname: `172-237-79-209.ip.linodeusercontent.com`

- No email authentication records (SPF/DKIM)

---

**3. Observation History**

• Recent Activity:

- Last 30 days: 23 observations (15/6/2026–17/6/2026)

- Stability: 0 route changes | No persistent malicious behavior

- Geo-validation inconsistency: Plausible location flagged as "false"

---

**4. Relationships**

• Network: Directly linked to Linode’s infrastructure (AS63949)
• DNS: Associated with `linodeusercontent.com` (hosting provider)
• No malicious connections detected in relationship graph

---

**5. Neighborhood Analysis**

• Subnet: `172.237.79.209/24` | Abuse density: 0% (clean)
• Neighbors: No sibling IPs found (likely isolated host)

---

**6. Recommendations**

• Monitor: Track geo-validation discrepancies and SSH port activity for anomalies.
• Firewall: No immediate blocking required; low-risk infrastructure.
• Context: Linode’s cloud-hosted IP; verify if this aligns with known legitimate traffic patterns.

---

*End of briefing. Generated from IPDebrief data.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.