172.239.15.147📋 Copy

# IP Intelligence Briefing: 172.239.15.147/32

## Executive Summary

IP address 172.239.15.147 is classified as Low Risk with a risk score of 25. The address belongs to Linode (ASN 63949), a legitimate cloud computing provider. No active threat indicators, malicious campaigns, or abuse patterns detected. Suitable for standard monitoring; no immediate blocking required.

---

## Infrastructure Profile

Ownership & Network

• Provider: Linode
• ASN: 63949
• Infrastructure Type: CloudCompute (Cloud Hosting)
• Geolocation: United States (geolocation data indicates Paris, France coordinates)
• CIDR Block: 172.239.0.0/19

DNS Resolution

• PTR Record: 172-239-15-147.ip.linodeusercontent.com
• Domain: linodeusercontent.com
• Forward Resolution: Confirmed (1 hostname)
• DNSSEC: Valid

Service Exposure

• Open Ports: None detected
• Service Classification: Firewalled / No Services
• TLS Certificates: None observed
• HTTP Banner: None observed

---

## Threat Intelligence Assessment

Risk Indicators

• Abuse Confidence Score: Not applicable (cloud infrastructure)
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Correlation: None detected

Control Plane Data

• Route Stability: Stable (0 route changes in 30 days)
• DNSBL Listings: 1 (of 8 total lists)
• RPKI State: Not applicable
• BGP Prefix: 172.239.0.0/19

---

## Neighborhood Analysis

• Subnet: 172.239.15.0/24
• Abuse Density: 0.0 (clean)
• Threat Siblings: 0
• Active Siblings: 1
• Classification: Clean

The /24 subnet contains no malicious peers. No inherited risk from neighboring addresses.

---

## Historical Observations

Signal Timeline

• Total Observations: 27 signals
• Recent Activity: Signals observed as recently as 2026-06-19
• Threat Persistence: 0 days (no persistent malicious activity)
• Classification Trend: Consistently "clean" across all historical observations

Geo-Validation

• Status: ICMP validation blocked
• Distance Discrepancy: 500.2 km from claimed coordinates
• Geo-Plausibility: True (coordinates verified)

---

## Relationship Graph

• DNS Associations: 172-239-15-147.ip.linodeusercontent.com
• Network Relationships: LINODE (same network)
• No Malicious Correlations: No relationships to known bad actors or compromised infrastructure

---

## Recommended Actions

Firewall Rules

• Allow: No specific blocking required
• Monitor: Standard cloud traffic patterns
• Log: NetFlow/traffic logging for baseline establishment

SOC Guidance

1. Classification: Benign cloud infrastructure

2. Action: No blocking required

3. Monitoring: Standard cloud provider baseline

4. Investigation: Only if observed in connection with suspicious traffic patterns

---

## Intelligence Confidence

High – Multiple data sources confirm legitimate cloud hosting infrastructure. No contradictory threat indicators.

*Report generated: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.