144.172.112.57📋 Copy

# IP Intelligence Briefing: 144.172.112.57/32

## Executive Summary

IP address 144.172.112.57 presents a moderate risk profile (risk score: 40/100) with no active threat indicators. The address is associated with RouterHosting LLC infrastructure in the United States and currently operates in a firewalled state with no open services.

## Technical Profile

Ownership & Network Classification

• Organization: RouterHosting LLC (per historical signals)
• AS Number: 14956 (Origin ASN from control plane data)
• CIDR Block: 144.172.112.0/24
• Network Type: Non-residential infrastructure with firewalled services
• Classification Flags: Not cloud, CDN, VPN, proxy, Tor, hosting, or mobile

Geolocation

• Primary Location: United States, Utah, Ogden (41.22°N, 111.96°W)
• Secondary Signal: Wyoming, USA (lower confidence geolocation source)
• Timezone: America/Denver
• GeoValidation: Multiple sources with consensus enabled

DNS Resolution

• PTR Record: 57.112.172.144.static.cloudzy.com
• Hosted Domain: cloudzy.com
• Email Authentication: SPF and DMARC records present
• Forward Resolution: Confirmed (1 hostname)

Service State

• Open Ports: None detected
• TLS Certificate: Not observed
• HTTP Banner: No service response
• Status: Firewalled / No Services

## Threat Intelligence Assessment

Risk Indicators

• Risk Score: 40/100 (Moderate)
• Abuse Confidence Score: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0 (control plane indicates 2 DNSBL entries across 8 lists)
• Threat Persistence: No persistent malicious activity detected

Control Plane Analysis

• BGP Prefix: 144.172.112.0/24
• Route Stability: False (route changes observed in 30-day window)
• RPKI State: Not validated
• IRR Consistency: Not assessed
• DNSSEC: Valid
• CAA Records: Present

## Neighborhood Analysis

Subnet: 144.172.112.0/24

• Abuse Density: 0.5 (moderate)
• Classification: Mostly clean
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 1

Neighbor IP: 144.172.112.35

• Risk Score: 15/100 (Low)
• Authority Score: 50
• Status: Low-risk infrastructure

## Historical Observations

Signal History (17 observations)

Recent signals indicate:

• Organization Confirmation: RouterHosting LLC consistently identified
• Geolocation Variance: Multiple sources report Utah (Ogden) and Wyoming locations
• Ownership Stability: No ownership changes detected
• Threat Activity: Single threat observation, not persistently malicious

Temporal Analysis

• Ownership Changes: 0
• Threat Observation Count: 1
• Persistence Days: 0
• Is Persistently Malicious: False

## Relationships

• DNS Associations: 57.112.172.144.static.cloudzy.com (duplicate entries)
• No additional organizational or certificate relationships detected

## Recommended Actions

Firewall Rules

No specific firewall rules recommended at this time. The IP is firewalled with no active services.

Monitoring Recommendations

1. Monitor for service activation on this address

2. Track route stability changes for ASN 14956

3. Continue observation of DNSBL listing status

4. Monitor for correlation with 144.172.112.35 (low-risk neighbor)

Threat Hunting

No immediate threat hunting required. The IP shows moderate risk primarily due to network classification and control plane anomalies rather than active malicious behavior.

---

Classification: Moderate Risk

Last Updated: 2026-07-31

Data Sources: IPDebrief Intelligence Platform

Analyst Notes: IP operates in firewalled state with no open services. Route instability detected. Continue passive monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.