IP INTELLIGENCE BRIEFING: 172.236.241.100/32
Classification: Low Risk / Cloud Infrastructure
Date: 2026-08-05
Reporting Entity: IPDebrief Intelligence Team
---
EXECUTIVE SUMMARY
IP 172.236.241.100 is a Linode cloud computing instance located in Los Angeles, California (US). The address maintains a low-risk reputation profile (Risk Score: 25) with no active threat indicators or malicious campaign associations. The IP resolves to a standard Linode hosting domain and operates HTTPS services on port 443.
---
OWNERSHIP & GEOLOCATION
- Organization: LINODE (AS63949)
- CIDR Block: 172.232.0.0/13
- Geolocation: United States, California, Los Angeles
- Infrastructure Type: Cloud Compute
- Network Role: Web Server
- DNS PTR: 172-236-241-100.ip.linodeusercontent.com
---
THREAT INDICATORS ANALYSIS
Current Risk Status: No active threats detected.
- Threat Indicators: None
- Known Campaigns: None
- Blacklist Count: 0
- Abuse Confidence Score: Not applicable
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Control Plane Observations:
- DNSBL Listed: 1 of 8 lists (minimal concern)
- Operator Score: 0.2609 (Basic)
- Route Stability: False
- RPKI State: Not validated
- IRR Consistency: Not assessed
---
OBSERVATION HISTORY (21 Total Observations)
Recent signal history indicates normal cloud infrastructure behavior with no escalation of risk:
- 2026-08-05 18:05:13: HTTPS connection attempt recorded
- 2026-08-05 18:03:30: Operator score assessment (0.2609, Basic)
- 2026-07-29 19:56:38: Port scanning activity detected
- 2026-07-29 19:54:28: Ownership persistence confirmed (0 days change)
Temporal Analysis:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Persistently Malicious: No
- Threat Observation Count: 0
---
NEIGHBORHOOD ANALYSIS
Subnet: 172.236.241.100/24
- Abuse Density: 0 (Clean)
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
No neighboring IPs within the /24 subnet show elevated risk profiles. The subnet is classified as "clean" with no inherited risk.
---
RELATIONSHIP GRAPH
Key Associations:
- DNS Hostname: 172-236-241-100.ip.linodeusercontent.com
- Network: LINODE (AS63949)
Multiple DNS and network associations point to the Linode infrastructure platform. No external organizational or certificate relationships detected beyond Linode's own network.
---
RECOMMENDED ACTIONS
Firewall/Security Recommendations:
- Action: Monitor (Low Risk)
- Rationale: Cloud infrastructure with standard HTTPS service. No immediate blocking required.
- Classification: Legitimate cloud hosting environment
- Baseline Expectation: Standard web server traffic patterns
IOC Monitoring:
- Monitor for changes in DNS resolution
- Track for new port openings
- Watch for reputation score escalation above 50
---
INTELLIGENCE CONFIDENCE
Data Sufficiency: Medium (Control plane data indicates basic operator classification)
Geolocation Confidence: High (Multiple sources confirm US/California)
Ownership Confidence: High (AS63949 / Linode confirmed)
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 172.232.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 172-236-241-100.ip.linodeusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 172-236-241-100.ip.linodeusercontent.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 22% | 9 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-23 20:05:16 UTC |
| Last Seen | 2026-08-12 17:58:01 UTC |
| Profile Built | 2026-08-12 18:06:49 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 25 |
Full dossier details are available via our API.