45.79.165.102
IP Intelligence Briefing: 45.79.165.102/32
Executive Summary
Intellect analysis of 45.79.165.102 identified a low-risk cloud infrastructure endpoint hosted on Linode (ASN 63949) with minimal threat indicators. The IP maintains a risk score of 25, operates within the 45.79.0.0/16 block, and demonstrates no active threat behaviors.
Ownership and Network Classification
The endpoint belongs to Linode's cloud compute infrastructure. Route origin confirmed as 45.79.160.0/20 under AS63949. The subnet 45.79.165.0/24 registers abuse density of zero with no active or threat-adjacent siblings. Control plane analysis indicates route stability with minimal operator activity (0.1304 score).
Geolocation and RTT Validation
Geolocation data reported United States, New Jersey region (Cedar Knolls). However, geo-validation flagged an RTT anomaly: observed 24ms round-trip time falls below the minimum theoretical threshold of 119.8ms for the claimed distance, resulting in geoPlausible=false status. This suggests the endpoint may be reporting inaccurate geolocation data.
DNS and Service Profile
Reverse DNS resolution points to imsecureapp.com with forward resolution confirmation pending. Domain exhibits SPF and DMARC records present. Service scan returned no open ports, indicating the endpoint is either firewalled or inactive for public-facing services. No TLS certificates or HTTP banners detected.
Threat Intelligence Findings
No threat indicators identified:
- Zero blacklist entries across 8 checked feeds
- No Tor exit node activity
- No proxy/VPN/CDN functions
- No known campaign associations
- No active abuse confidence signals
Historical Observation
Analysis of 20 historical observations from 2026-08-13 showed consistent network classification with stable ownership. Recent scanning activity detected but without malicious indicators.
Security Recommendations
No immediate firewall or blocking actions recommended based on current risk profile. The IP presents as a benign cloud endpoint with no evidence of malicious activity. SOC teams may monitor for future behavioral changes, particularly given the geolocation inconsistencies observed.
Classification
Clean / Low Risk — No action required at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 45.79.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | imsecureapp.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | imsecureapp.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | Apache/2.4.6 |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_6.6.1 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 00F4B71CE33BF77B041410E3A7133A4EBD |
| Thumbprint | 212B445BC63E4CA22079C58700E36D5B57EAF545 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 50% | 2 | 3 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 30% | 8 | 9 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-10 17:29:00 UTC |
| Last Seen | 2026-08-30 17:30:31 UTC |
| Profile Built | 2026-08-30 17:42:14 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 29 |
Full dossier details are available via our API.