# INTELLIGENCE BRIEFING: IP 172.233.204.180/32
Classification: Low Risk / Clean Infrastructure
Date: 2026-08-05
Analyst: IPDebrief SOC Intelligence
---
## EXECUTIVE SUMMARY
IP address 172.233.204.180/32 is associated with Linode cloud infrastructure in Ashburn, Virginia. The address shows no observable threat indicators, maintains a zero-risk score, and demonstrates clean behavioral patterns across all monitoring dimensions. No defensive action required at this time.
---
## INFRASTRUCTURE PROFILE
| Attribute | Value |
|---|---|
| **Organization** | Linode (LINODE) |
| **ASN** | 63949 |
| **CIDR Block** | 172.232.0.0/13 |
| **Geolocation** | US, Virginia, Ashburn |
| **Infrastructure Type** | CloudCompute |
| **Network Classification** | Hosting / Firewalled |
| **Risk Score** | 0 |
---
## THREAT INDICATORS
Current Assessment: No Active Threats
- Blacklist Count: 0
- Abuse Confidence Score: None observed
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Active Campaigns: None detected
- Campaign Likelihood: None
Historical Context: Analysis of 20 observation signals from 2026-07-30 through 2026-08-05 reveals consistent classification as "clean" with zero inherited risk and no threat sibling activity within the /24 subnet neighborhood.
---
## NETWORK BEHAVIOR
Service Exposure:
- Open Ports: None detected
- TLS Certificates: None
- HTTP Services: None
- Connection Type: Firewalled / No Services
Operational Status:
- Operator Score: 0.1304 (Minimal)
- Threat Persistence Days: 0
- Ownership Changes: 0
- Persistently Malicious: No
---
## RELATED ENTITIES
Relationship Graph: 7 relationships identified, all mapped to Linode network infrastructure. No external associations to competing cloud providers, hostnames, or certificate authorities detected.
Neighborhood Analysis (172.233.204.0/24):
- Abuse Density: 0%
- Risk Distribution: Clean (High: 0, Medium: 0, Low: 0)
- Threat Siblings: 0
- Active Siblings: 1
---
## SECURITY RECOMMENDATIONS
Current Status: No firewall rules or blocking actions recommended.
Monitoring Guidance:
- Continue routine observation as part of standard infrastructure monitoring
- No immediate threat mitigation required
- IP represents legitimate Linode cloud hosting infrastructure
---
## SIGNAL TIMELINE
Key observations from monitoring period:
- 2026-08-05T21:19:24: Subnet classification confirmed as "clean" with zero abuse density
- 2026-08-05T21:18:53: Operator score registered at 0.1304 (Minimal)
- 2026-07-30T10:29:51: No banner or campaign correlations detected
- 2026-07-30T10:24:41: Service scan returned no open ports
---
END OF BRIEFING
*Data Source: IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 172.232.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 172-233-204-180.ip.linodeusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 172-233-204-180.ip.linodeusercontent.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| Closed Ports | 22, 25, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 40% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-27 03:35:45 UTC |
| Last Seen | 2026-08-12 21:14:09 UTC |
| Profile Built | 2026-08-12 21:18:40 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 27 |
Full dossier details are available via our API.