144.172.97.234📋 Copy

# Intelligence Briefing: 144.172.97.234/32

Date: 2026-07-30

Analyst: IPDebrief Intelligence Team

Classification: Routine Network Intelligence

## Executive Summary

IP address 144.172.97.234 is registered to RouterHosting LLC (AS14956) and is classified as Low Risk with a risk score of 25/100. The IP is associated with colocation hosting infrastructure in Staten Island, New York. Current threat indicators are minimal, with no active malicious campaigns detected. The IP maintains a stable ownership profile and shows no evidence of persistent malicious behavior.

## Ownership and Infrastructure

The IP resides within a /23 block with 5 total siblings in the /24 subnet (144.172.97.0/24), with 3 active siblings. The subnet demonstrates a clean classification with 0 abuse density.

## Threat Assessment

Current Threat Indicators

• Risk Score: 25/100
• Abuse Confidence Score: Not applicable
• Blacklist Status: Listed on 1 of 8 threat feeds
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Control Plane Status

• Route Stability: False (isRouteStable: false)
• RPKI State: Not verified
• IRR Consistency: Not verified
• Route Changes (30d): 0
• DNSSEC Valid: True
• CAA Records: Present

## Network Neighborhood Analysis

The /24 subnet (144.172.97.0/24) contains 4 neighbor IPs with the following risk distribution:

• High Risk: 0
• Medium Risk: 1 (144.172.97.164, risk score 40)
• Low Risk: 3 (including target IP 144.172.97.234, risk score 25)

Notable neighbors:

• 144.172.97.10 (risk: 0)
• 144.172.97.59 (risk: 25)
• 144.172.97.163 (risk: 0)
• 144.172.97.164 (risk: 40)

The neighborhood demonstrates low-to-moderate risk characteristics with no concentration of high-risk activity.

## Historical Observations

Analysis of 18 historical observations reveals:

• Subnet Classification: Consistently classified as "clean" with 0 abuse density
• Geolocation: US attribution (confidence 0.35)
• DNS Records: Valid DNSSEC, 5 CAA records present
• Blacklist Activity: 1 listing detected across 8 total lists (max severity: high)
• Persistence: No persistent malicious behavior observed
• Threat Persistence Days: 0

Recent observations confirm stability in network classification and geolocation attributes.

## DNS and Hostname Associations

• PTR Record: 234.97.172.144.static.cloudzy.com
• Forward Resolution: 1 hostname
• Domain: cloudzy.com
• Forward Resolution Count: 1
• Email Auth: SPF and DMARC records present

DNS associations indicate static cloud resource naming convention. No hosted domains detected.

## Services and Port Analysis

• Open Ports: None detected
• TLS Certificate: None detected
• HTTP Title: None detected
• Server Banner: None detected
• Certificates: None detected

The IP presents a "firewalled / no services" profile, consistent with colocation hosting infrastructure.

## Recommended Actions

Based on the IP's risk profile (score 25/100), the following actions are recommended:

1. Allow Traffic: Standard ingress/egress permitted. No blocking required.

2. Monitoring: Include in routine threat monitoring due to hosting nature.

3. Neighbor Awareness: Monitor 144.172.97.164 (risk score 40) for elevated activity.

4. DNS Monitoring: Track cloudzy.com domain for certificate changes or DNS anomalies.

5. Blacklist Review: Monitor the single DNSBL listing for persistence or expansion.

## Threat Intelligence Narrative

IP 144.172.97.234 operates as a static cloud resource within RouterHosting LLC's colocation infrastructure. The IP demonstrates low-risk characteristics with a score of 25/100 and no active threat indicators. The subnet environment (144.172.97.0/24) maintains a clean classification with minimal abuse density. Historical data confirms stable ownership and consistent geolocation attribution to New York, USA.

The single DNSBL listing warrants attention but does not indicate active malicious use. The IP's firewall configuration and lack of open services align with legitimate hosting provider practices. Security operations should treat this IP as low priority for immediate action while maintaining routine monitoring protocols.

Confidence Level: Medium-High

Risk Level: Low

Recommended Priority: Routine Monitoring

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.