# IP Intelligence Briefing: 172.239.61.114/32
Classification: Cloud Compute Infrastructure | Risk Level: Low | Status: Clean
---
## Executive Summary
IP 172.239.61.114 is a Linode cloud computing endpoint operating within the 172.239.0.0/13 address block. The IP maintains a low-risk profile with zero threat indicators and no active malicious campaigns. Infrastructure shows stable operational characteristics with no evidence of abuse activity.
---
## Ownership and Network Context
| Attribute | Value |
|---|---|
| **Organization** | Linode |
| **ASN** | 63949 |
| **CIDR Block** | 172.239.0.0/13 |
| **Geolocation** | Chicago, Illinois, US |
| **Network Role** | CloudCompute |
| **Infrastructure Type** | Cloud Hosting |
The IP is part of Linode's cloud infrastructure network (LINODE netname). All relationship data indicates connections to the LINODE network only.
---
## Threat Assessment
Current Risk Profile:
- Risk Score: 0 (Low Risk)
- Abuse Confidence: None detected
- Blacklist Status: Clean (0 listings)
- Threat Feeds: No matches
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Threat Indicators: No threat indicators present. The IP shows no evidence of being used for malicious activities.
---
## Network Services Analysis
Open Ports: None detected
DNS Resolution: No PTR hostnames, no forward resolution confirmed
HTTP/TLS: No HTTP title, TLS certificate, or server banner detected
Network Behavior: Firewalled / No Services exposed
The endpoint appears to be properly configured cloud infrastructure with no public-facing services or open ports detected during analysis.
---
## Neighborhood Analysis
Subnet: 172.239.61.114/24
- Abuse Density: 0% (Clean)
- Active Siblings: 2
- Threat Siblings: 0
Adjacent IP Observations:
- 172.239.61.67: Risk Score 25, Authority Score 60
The /24 subnet demonstrates minimal abuse density with no threat-adjacent neighbors, indicating clean network hygiene within the Linode infrastructure.
---
## Historical Observations
Analysis Period: 18 observations recorded (July-August 2026)
Key Historical Trends:
- Operator Score: Consistently minimal (0.1304)
- Subnet Classification: Maintained "clean" status throughout observation period
- Campaign Likelihood: None detected in historical signals
- Threat Persistence: No persistent malicious activity observed
- Routing Stability: Route changes recorded, but no anomalous patterns
The historical data confirms stable, benign operational behavior with no degradation in risk posture over the observation window.
---
## Control Plane Assessment
- Route Stability: False (changes detected)
- MOAS Status: False
- RPKI State: Not available
- DNSSEC: Valid
- DNSBL Listings: 8 total lists (operator score: 0.1304)
- Delegation Age: Not available
The control plane shows minimal routing anomalies consistent with cloud infrastructure behavior.
---
## Recommended Actions
Current Status: No immediate action required.
Monitoring Recommendations:
1. Maintain standard cloud infrastructure monitoring
2. No firewall rules required based on current risk profile
3. Continue periodic review of associated Linode subnet (172.239.61.0/24)
Note: The IP exhibits characteristics consistent with legitimate cloud hosting operations. No blocking or restrictive firewall rules are warranted at this time.
---
Report Generated: IPDebrief Intelligence Platform
Data Sources: IP profile, neighborhood analysis, relationship graph, historical signal observations
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 172.232.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-27 03:35:45 UTC |
| Last Seen | 2026-08-12 21:15:01 UTC |
| Profile Built | 2026-08-12 21:17:23 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.