172.86.73.202📋 Copy

# IP Intelligence Briefing: 172.86.73.202

## Executive Summary

IPDebrief analysis assigned 172.86.73.202 a risk score of 40 (Moderate Risk) on 2026-07-29. The address belongs to RouterHosting LLC (ASN 14956) within the 172.86.73.0/24 subnet. No active threat indicators were detected, but the IP requires monitoring due to moderate risk classification and inconsistent geolocation signals.

## Ownership and Infrastructure

• Organization: RouterHosting LLC (ASN 14956)
• CIDR Block: 172.86.73.0/24
• RIR: ARIN
• Abuse Contact: abuse-reports@cloudzy.com
• Geolocation: US (Dallas, Texas per profile; Wyoming per historical signal)
• Control Plane: BGP prefix 172.86.73.0/24, route stability flagged as false
• DNS Records: PTR hostname 202.73.86.172.static.cloudzy.com (forward resolution unconfirmed)

## Threat Assessment

• Risk Score: 40 (Moderate)
• Abuse Confidence: Not calculated
• Blacklist Status: 0 blacklist hits
• Known Threats: None detected (not known attacker, not Tor exit, not proxy)
• Campaign Association: No known campaigns linked
• Service Status: No open ports or services detected (Firewalled / No Services)
• Email Reputation: SPF and DMARC records present on associated domain

## Historical Signals (17 observations)

Recent observations show consistent ownership attribution to RouterHosting LLC. Geolocation signals demonstrated varying confidence levels (35-95%), with country consistently identified as US but city data conflicting between Dallas and Wyoming. No persistent malicious behavior observed over the observation period.

## Network Neighborhood Analysis

The 172.86.73.0/24 subnet contains 1 detected neighbor:

• 172.86.73.156: Risk score 20 (Low risk)
• Subnet Abuse Density: 0
• Overall Classification: Low risk environment

## Relationship Graph

Six relationships identified:

• Two "Same Network" associations with ROUTERHOSTING
• Four DNS associations pointing to 202.73.86.172.static.cloudzy.com

## Recommended Actions

IPDebrief recommends blocking 172.86.73.202 across multiple security platforms:

```bash

# iptables

iptables -A INPUT -s 172.86.73.202 -j DROP

# nftables

nft add rule inet filter input ip saddr 172.86.73.202 drop

# Cloudflare WAF

ip.src eq 172.86.73.202 → Block

# AWS WAF

Addresses: ["172.86.73.202/32"]

```

## Intelligence Notes

The moderate risk score stems primarily from control plane inconsistencies (geoPlausible: false, isRouteStable: false) rather than active malicious activity. The subnet exhibits low abuse density with a single neighboring IP also classified as low risk. No direct evidence of compromise or attack activity was present in the profile, but the inconsistent geolocation signals warrant continued monitoring.

---

*Analysis generated using IPDebrief intelligence platform. Recommendations are probabilistic and should be combined with additional signals before enforcement.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.