# IP Intelligence Briefing: 172.237.69.140
## Executive Summary
IP 172.237.69.140 is classified as Low Risk with a risk score of 25. This is a Linode cloud compute infrastructure address located in Singapore with no active threat indicators observed across 24 signal observations.
## Ownership and Classification
- Organization: Linode (ASN 63949)
- Network: 172.237.64.0/19
- Infrastructure Type: CloudCompute
- Geolocation: Singapore (SG)
- Registration: Linodeusercontent.com domain
## Threat Profile
- Risk Score: 25 (Low Risk)
- Abuse Confidence: Not available
- Blacklist Status: 0 listings
- Threat Indicators: None detected
- Known Campaigns: None associated
- Tor/Proxy/VPN: Not identified as any of these services
- Open Services: None detected (firewalled/no services)
## Neighborhood Analysis
The /24 subnet (172.237.69.0/24) shows:
- Abuse Density: 0 (clean)
- Active Siblings: 2
- Threat Siblings: 0
- Risk Distribution: 1 medium risk (172.237.69.220, score 50), 1 low risk (172.237.69.13, score 25)
## Historical Observations
- Total Observations: 24
- Recent Classification: Clean
- Threat Persistence: Not persistently malicious
- Ownership Changes: 0
## Relationship Graph
The IP has multiple DNS associations to `172-237-69-140.ip.linodeusercontent.com` and network-level associations to the LINODE infrastructure.
## Recommended Actions
No immediate blocking recommended. This IP represents legitimate cloud infrastructure with no threat indicators. Monitor if traffic patterns deviate from expected baseline for cloud services.
## Analyst Notes
This address is part of a cloud provider's infrastructure. While the medium-risk sibling (172.237.69.220) may warrant attention in broader context, the target IP itself shows no malicious activity. Standard cloud traffic monitoring applies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 172.232.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 172-237-69-140.ip.linodeusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 172-237-69-140.ip.linodeusercontent.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 43% | 2 | 5 |
| Overall | 26% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-29 16:41:31 UTC |
| Last Seen | 2026-08-12 23:42:50 UTC |
| Profile Built | 2026-08-12 23:50:27 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
Full dossier details are available via our API.