45.56.94.223📋 Copy

# IP Intelligence Briefing: 45.56.94.223/32

Classification: LOW RISK

Report Date: 2026-08-05

---

## Executive Summary

IP 45.56.94.223 is a low-risk residential IP address hosted on Linode cloud infrastructure. The IP shows minimal threat indicators with a risk score of 25. No active malicious campaigns, known attacker status, or spam source designation detected. The address operates as a web server with HTTPS services only.

---

## Network Profile

---

## Technical Observations

Open Services:

• Port 443/TCP (HTTPS)
• TLS Certificate: Issued by AnchorFree Security Operations (CN=a620e6777f64, OU=AnchorFree Security Operations, O=AnchorFree)

DNS Status:

• No PTR hostnames resolved
• Forward resolution not confirmed
• No SPF or DMARC records

Control Plane:

• DNSBL listed on 1 of 8 total lists
• BGP prefix: 45.56.80.0/20
• Route stability: False

---

## Threat Intelligence

Current Threat Status:

• IsTorExit: False
• IsKnownAttacker: False
• IsSpamSource: False
• Threat Feeds: None detected
• Known Campaigns: None

Abuse Indicators:

• Abuse Confidence Score: Not applicable (low threat)
• Pulsedive Risk: Not reported
• Campaign Likelihood: None

---

## Neighborhood Analysis

Subnet: 45.56.94.223/24

• Abuse Density: 1 (mostly_clean classification)
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1

---

## Historical Signals

Observation count: 20 signals recorded. Recent activity observed on 2026-08-05:

Threat Persistence: 0 days. Not classified as persistently malicious.

---

## Network Relationships

Multiple network-level relationships identified pointing to Linode infrastructure. No anomalous cross-network associations detected.

---

## SOC Recommendations

Priority: LOW

1. No immediate action required – IP classified as low risk with minimal abuse indicators

2. Monitor for changes – Track for any escalation in threat indicators or blacklist additions

3. Contextual awareness – While Linode hosting is generally legitimate, verify against known threat feeds if connection attempts originate from this IP

4. False positive potential – AnchorFree certificate issuer is commonly used for legitimate services; no certificate-based threats identified

Actionable Rule (Optional):

```

# No block recommended – low risk profile

# Consider logging for visibility if traffic originates from this IP

```

---

Analyst Notes: This IP represents standard Linode cloud hosting infrastructure. The single DNSBL listing shows minimal abuse activity. Historical data indicates stable ownership with no persistent malicious behavior. Suitable for routine monitoring without immediate blocking or investigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.