## THREAT INTELLIGENCE BRIEFING
Target: 172.236.243.73/32
Date: August 2026
Risk Level: LOW (Score: 25/100)
EXECUTIVE SUMMARY
IP 172.236.243.73 is a Linode cloud compute infrastructure address with low-risk classification. No active threat indicators, malicious campaigns, or significant abuse patterns detected. The IP belongs to a clean subnet with zero abuse density and no threat-adjacent neighbors.
TECHNICAL PROFILE
| Attribute | Value |
|---|---|
| **Organization** | Linode (ASN 63949) |
| **Network** | 172.232.0.0/13 |
| **Geolocation** | Los Angeles, California, US |
| **Infrastructure** | Cloud Compute / Hosting |
| **Services** | None detected (Firewalled) |
| **DNS Status** | No PTR records, no forward resolution |
THREAT INTELLIGENCE
- Abuse Confidence Score: Not applicable (clean classification)
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Blacklist Count: 0
- Active Threats: None
- Campaign Association: None
NETWORK BEHAVIOR
- Control Plane: BGP prefix 172.236.224.0/19, route stable (no changes in 30 days)
- DNSBL Status: Listed on 1 of 8 threat feeds (minimal operator score: 0.13)
- Open Ports: None detected
- TLS/Services: No active services, firewalled configuration
OBSERVATION HISTORY
18 observations tracked from JulyβAugust 2026:
- Classification: Consistently "clean" across all observations
- Threat Persistence: Zero days of persistent malicious activity
- Ownership Stability: No ownership changes recorded
- Recent Signal (2026-08-05): Subnet abuse density 0, 1 active sibling, 0 threat siblings
RELATIONSHIP ANALYSIS
Network associations exclusively tied to Linode infrastructure. No anomalous relationships to known malicious entities, campaigns, or compromised hostnames.
SECURITY ACTIONS
Status: No immediate action required
Recommended:
- No firewall rules necessary at this time
- IP may be whitelisted if legitimate cloud service
- Monitor for any changes in risk profile over next 30 days
- Standard cloud provider IP handling applies
SOC ANALYST NOTES
This IP represents routine Linode cloud infrastructure with no actionable threat intelligence. The low risk score (25) and clean subnet classification indicate normal hosting operations. No defensive measures beyond standard cloud provider monitoring recommended. If this IP appears in alerting, verify against known Linode customer ranges and review context before escalation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 172.232.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 172-236-243-73.ip.linodeusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 172-236-243-73.ip.linodeusercontent.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 35% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 25% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-27 03:35:45 UTC |
| Last Seen | 2026-08-12 21:14:19 UTC |
| Profile Built | 2026-08-12 21:18:40 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.