# 173.255.214.52 — IP Intelligence Summary

173.255.214.52 is an IPv4 address operated by Linode (AS63949), geolocated to Fremont, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name prod-barium-us-west-66.li.binaryedge.ninja. As of November 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/173.255.214.52
- Last updated: 2026-11-06

## Ownership

- Organization: Linode
- Network name: LINODE
- Allocated block: 173.255.192.0/18
- ASN: AS63949 (https://ipdebrief.com/asn/63949)
- Regional registry: ARIN
- Cloud / hosting provider: Linode

## Location

- City: Fremont
- Region: CA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- prod-barium-us-west-66.li.binaryedge.ninja
- Forward-confirmed: yes

## Exposed services

- 22/tcp — ssh

## Analyst narrative

\# IP Intelligence Briefing: 173.255.214.52

**Classification:** LOW RISK / Cloud Infrastructure Host

**Date:** 2026-08-12

**Analyst:** IPDebrief Intelligence Unit

\---

\## Executive Summary

IP 173.255.214.52 is a Linode cloud hosting address located in Fremont, California (US). The IP maintains a low-risk reputation score (20/100) with no active threat indicators. The subnet demonstrates clean classification with minimal abuse density. One neighbor IP (173.255.214.230) shows elevated risk scoring (65), warranting monitoring but not immediate action.

\---

\## Technical Profile

| Attribute | Value |

|-----------|-------|

| **Risk Score** | 20 (Low) |

| **ASN** | 63949 |

| **Organization** | Linode (LINODE) |

| **Network** | 173.255.192.0/18 |

| **Geolocation** | Fremont, California, US |

| **Infrastructure Type** | CloudCompute |

| **DNS PTR** | prod-barium-us-west-66.li.binaryedge.ninja |

| **Open Ports** | SSH (22/tcp) |

\---

\## Threat Assessment

**Current Threat Indicators:**

\- No blacklist listings (0/0)

\- Not identified as Tor exit node

\- Not flagged as known attacker or spam source

\- No active threat campaigns correlated

\- Threat persistence: 0 days (no persistent malicious activity)

**Historical Observations (24 signals):**

\- Recent listing activity observed on 2026-08-12 with high-severity indicators

\- Earlier observations (2026-08-05) confirmed cloud hosting classification

\- Operator score: 0.2609 (Basic)

\- Control plane stability: Route changes detected in last 30 days

**Network Neighborhood (173.255.214.0/24):**

\- Total sibling IPs: 4

\- Abuse density: 0 (Clean)

\- Risk distribution: 3 low, 1 medium

\- Elevated-risk neighbor: 173.255.214.230 (Risk: 65)

\---

\## Key Relationships

**DNS Associations:**

\- Primary hostname: prod-barium-us-west-66.li.binaryedge.ninja

\- Forward resolution confirmed

**Network Affiliation:**

\- Multiple relationships with LINODE network

\- No certificate-based relationships detected

\---

\## Recommended Actions

**Immediate:**

\- No immediate blocking required; IP classified as low-risk

\- Monitor elevated-risk neighbor (173.255.214.230) for correlated activity

**Firewall Rules:**

\- Allow SSH (22/tcp) if legitimate cloud workload expected

\- Standard cloud infrastructure treatment applies

**Monitoring Indicators:**

\- Watch for changes in DNS PTR records

\- Monitor for escalation of abuse density in /24 subnet

\- Track operator score trends over time

\---

\## Intelligence Notes

This IP operates within standard cloud infrastructure parameters. The presence of "binaryedge" in the hostname suggests potential association with threat intelligence data feeds (BinaryEdge), which may indicate the host is used for scanning or reconnaissance activities. However, current threat indicators remain absent. The elevated-risk neighbor IP should be investigated separately for potential campaign correlation.

## Nearby addresses

- 173.255.214.23 (https://ipdebrief.com/173.255.214.23)
- 173.255.214.44 (https://ipdebrief.com/173.255.214.44)
- 173.255.214.136 (https://ipdebrief.com/173.255.214.136)
- 173.255.214.230 (https://ipdebrief.com/173.255.214.230)

---

Source: IPDebrief, "173.255.214.52 IP intelligence", https://ipdebrief.com/173.255.214.52, updated 2026-11-06. Assessments are probabilistic.
