# Intelligence Briefing: 172.232.168.112
Classification: Low Risk | Status: Monitored
---
## Executive Summary
IP 172.232.168.112 is a cloud infrastructure endpoint hosted by Linode (ASN 63949) in Tukwila, Washington. The address maintains a risk score of 25 (Low Risk) with no active threat indicators. The IP resolves to Linode's hosting infrastructure and presents standard cloud compute characteristics.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **Organization** | Linode (ASN 63949) |
| **Infrastructure Type** | CloudCompute |
| **Geolocation** | US, Washington, Tukwila |
| **CIDR Block** | 172.232.0.0/13 |
| **DNS Record** | 172-232-168-112.ip.linodeusercontent.com |
| **Open Ports** | 22 (SSH) |
---
## Threat Assessment
Risk Score: 25/100 (Low Risk)
- Blacklist Status: No active blacklists; 0 listings in major threat feeds
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaign Indicators: None detected
DNSBL Analysis: 1 listing across 8 DNSBLs with high severity classification noted in recent observations (August 2026). This represents a minor reputation concern but does not indicate active malicious activity.
---
## Neighborhood Analysis
The /24 subnet (172.232.168.0/24) shows:
- Abuse Density: 0%
- Classification: Clean
- Active Siblings: 1
- Threat Siblings: 0
No neighboring IPs in the immediate subnet exhibit malicious indicators.
---
## Observation History
25 historical observations tracked. Recent activity (August 2026) includes:
- Consistent Linode network classification
- DNS resolution stability confirmed
- One DNSBL listing event with high severity flag
No ownership changes or persistent threat behavior observed.
---
## Network Relationships
- Primary Network: LINODE (multiple network associations)
- DNS Association: 172-232-168-112.ip.linodeusercontent.com
- Control Plane: BGP prefix 172.232.160.0/19
---
## Recommended Actions
Current Risk Level: LOW
No immediate firewall or blocking actions recommended. The IP presents standard cloud hosting behavior with minimal threat indicators. Continue standard monitoring practices.
---
*Report generated: IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 172.232.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 172-232-168-112.ip.linodeusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 172-232-168-112.ip.linodeusercontent.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_10.0p2 Debian-7+deb13u4 |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-27 03:35:45 UTC |
| Last Seen | 2026-08-12 21:13:39 UTC |
| Profile Built | 2026-08-12 21:19:48 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 25 |
Full dossier details are available via our API.