23.239.29.116
IP INTELLIGENCE BRIEFING: 23.239.29.116/32
Executive Summary:
IP 23.239.29.116 is a low-risk cloud compute instance hosted on Linode (ASN 63949) infrastructure in Richardson, Texas. The IP maintains a risk score of 25 (Low Risk) with no active threat indicators detected. Historical analysis confirms persistent benign operation with no malicious campaign associations.
---
Infrastructure Profile:
- Organization: Linode (LINODE)
- ASN: 63949
- Network Block: 23.239.0.0/19 (CIDR: 23.239.0.0/19)
- Classification: Cloud Compute / Hosting
- Geolocation: United States, Texas, Richardson (2500km accuracy radius)
- Infrastructure Type: Single-Service Host
Network Services:
- Open Ports: TCP/22 (SSH) – SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16
- DNS Resolution: prod-boron-us-central-5.li.binaryedge.ninja → binaryedge.ninja
- Email Authentication: SPF present, DMARC absent
- TLS/Certificates: None observed
Threat Indicators:
- Blacklist Count: 0
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Active Threat Indicators: None
- DNSBL Listings: 1 of 8 total lists
Control Plane Analysis:
- BGP Prefix: 23.239.28.0/22
- Route Stability: False (route changes observed in past 30 days)
- RPKI State: Not verified
- Operator Score: 0.2609 (Basic)
---
Historical Observation Summary:
Analysis of 27 signal observations (most recent: 2026-08-12) indicates stable operational characteristics:
- Ownership changes: 0
- Threat persistence days: 0
- Persistent malicious activity: False
- No correlated IPs detected in campaigns
- No certificate matches or banner anomalies
---
Neighborhood Context (23.239.29.0/24):
- Subnet Classification: Mostly Clean
- Abuse Density: 0.5
- Total Siblings: 25
- Active Siblings: 1
- Threat Siblings: 1
- Neighbor IP: 23.239.29.226 (Risk Score: 25, Authority Score: 60, Low Risk)
---
Relationship Graph:
IP exhibits consistent DNS associations with prod-boron-us-central-5.li.binaryedge.ninja and network associations with LINODE infrastructure. Multiple same-network relationships confirmed.
---
Recommended Actions:
No immediate security actions required. The IP maintains a low-risk profile with no active threat indicators. Standard monitoring recommended given cloud hosting classification.
---
Analyst Notes:
The IP operates on legitimate cloud infrastructure with standard SSH access. No evidence of abuse, malicious activity, or campaign participation. The single DNSBL listing appears to be a false positive or unrelated listing given the overall clean profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 23.239.0.0/19 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | prod-boron-us-central-5.li.binaryedge.ninja |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | prod-boron-us-central-5.li.binaryedge.ninja |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS63949 |
| Network Prefix | 23.239.28.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 17 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 01:19:36 UTC |
| Last Seen | 2026-08-27 00:16:14 UTC |
| Profile Built | 2026-08-29 06:52:23 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 23.239.29.116
Who owns the IP address 23.239.29.116?
23.239.29.116 is registered to Linode. The address falls within the 23.239.0.0/19 network block. Registration is held at ARIN.
Where is 23.239.29.116 located?
Geolocation data places 23.239.29.116 in Richardson, Texas, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 23.239.29.116 malicious or safe?
23.239.29.116 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 23.239.29.116?
The reverse DNS (PTR) record for 23.239.29.116 is prod-boron-us-central-5.li.binaryedge.ninja. This hostname is forward-confirmed, meaning it resolves back to the same address.
What ports are open on 23.239.29.116?
Responsive ports observed on 23.239.29.116 include 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.
Is 23.239.29.116 a VPN, proxy, or data center address?
23.239.29.116 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.