192.155.84.226📋 Copy

# IP INTELLIGENCE BRIEFING: 192.155.84.226/32

Classification: Cloud Infrastructure Asset

Date: 2026-07-29

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP address 192.155.84.226 is a cloud compute resource hosted on Linode infrastructure in Fremont, California. The asset demonstrates moderate risk scoring (40) attributable to its cloud hosting classification rather than malicious activity. No active threats, blacklists, or persistent malicious behavior have been observed. The /24 neighborhood maintains a clean classification with zero abuse density.

---

## OWNERSHIP & INFRASTRUCTURE

The IP resolves to Linode's cloud infrastructure with forward confirmation. The PTR hostname confirms legitimate cloud hosting operations.

---

## THREAT ASSESSMENT

Risk Score: 40/100 (Moderate Risk)

Abuse Confidence: Not Available

Blacklist Count: 0

Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Association: None detected
• DNSBL Listings: 2 of 8 total lists

Assessment: The moderate risk score reflects the cloud hosting classification rather than malicious activity. No threat intelligence feeds report this IP as a known attacker or spam source.

---

## NETWORK BEHAVIOR

Service Analysis

• Open Ports: None detected
• HTTP Title: No
• TLS Certificate: No
• Status: Firewalled / No Services Exposed

The absence of open services indicates proper security hardening. The IP appears configured for backend infrastructure rather than public-facing services.

Control Plane

• Route Stability: Unstable
• DNSSEC Valid: Yes
• BGP Prefix: 192.155.80.0/21

---

## TEMPORAL ANALYSIS

Observation History: 18 signals recorded

Threat Persistence: 0 days

Ownership Changes: 0

Persistently Malicious: No

Recent observations (2026-07-29) confirm:

• Consistent Linode ASN attribution
• US geolocation with high confidence
• No ownership transitions
• Stable infrastructure classification

---

## NEIGHBORHOOD ANALYSIS

Subnet: 192.155.84.226/24

Abuse Density: 0.00 (Clean)

Threat Siblings: 0

Active Siblings: 0

The /24 subnet demonstrates clean classification with no neighboring IPs flagged for abuse activity. This supports the conclusion that the IP is operating within a legitimate cloud infrastructure environment.

---

## RELATIONSHIP GRAPH

Six relationships identified:

• 3x Same Network (LINODE)
• 3x DNS Association (192-155-84-226.ip.linodeusercontent.com)

No external organizational connections or certificate associations detected. The relationship graph confirms isolated cloud infrastructure deployment.

---

## RECOMMENDATIONS

For SOC Teams

1. Monitor: Track outbound connections from this IP, especially given cloud infrastructure nature

2. Allow: Standard cloud infrastructure traffic (SSH, RDP, admin ports)

3. Verify: No immediate blocking required; moderate risk score reflects hosting classification

Firewall Rules

No specific blocking rules recommended. Standard cloud infrastructure policies apply.

Priority

LOW – No active threat indicators detected

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.