IPDebrief

198.58.105.191

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 198.58.105.191/32

Date: 2026-08-05

Classification: LOW RISK β€” Cloud Infrastructure Host

Status: Active Monitoring

## Executive Summary

IP address 198.58.105.191 is a Linode cloud computing endpoint located in Richardson, Texas (US). The IP demonstrates no malicious indicators across all threat intelligence feeds. Classification as "clean" with zero risk score and no observed abuse activity. Recommended action: Continue monitoring; no immediate firewall restrictions required.

---

## Network Profile

AttributeValue
**IP Address**198.58.105.191/32
**ASN**63949
**Organization**Linode
**Network Block**198.58.96.0/19
**CIDR**198.58.105.191/24
**RIR**ARIN
**Infrastructure Type**CloudCompute
**Location**Richardson, Texas, United States
**Reputation**Low Risk
**Risk Score**0/100

---

## Threat Assessment

Current Risk Indicators

Service Exposure

Control Plane Data

---

## Neighborhood Analysis

Subnet: 198.58.105.191/24

No high or medium risk neighbors detected in the /24 subnet.

---

## Historical Observation Summary

Total Observations: 21

Observation Window: 2026-07-30 to 2026-08-05

MetricValue
**Recent Classification**Clean
**Abuse Density**0
**Threat Persistence**0 days
**Campaign Likelihood**None
**Cert Matches**0

All historical observations maintain consistent "clean" classification with no escalation in threat indicators.

---

## Relationship Graph

---

## Recommended Security Actions

Based on current risk profile (Risk Score: 0, Abuse Density: 0, No Threat Indicators):

ActionRecommendation
**Firewall Rules**No blocking required; standard allow rules apply
**Intrusion Detection**Monitor for anomalous outbound connections from this IP
**Threat Feeds**No additional monitoring needed
**Reputation Checks**Continue periodic monitoring

Note: As a Linode cloud infrastructure IP with no open services and no threat indicators, this endpoint represents legitimate cloud hosting activity. No defensive restrictions are warranted at this time.

---

## Intelligence Notes

Analyst Assessment: This IP address represents legitimate cloud infrastructure activity with no malicious characteristics. Standard defensive monitoring is appropriate; no immediate threat response actions required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionTX
CityRichardson
TimezoneAmerica/Chicago
Latitude31.97
Longitude-99.90

🏒 Ownership & Registration

OrganizationLinode
ASNAS63949
Network NameLINODE
CIDR Block198.58.96.0/19
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR198-58-105-191.ip.linodeusercontent.com
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnames198-58-105-191.ip.linodeusercontent.com

πŸ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSVerified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeSingle-Service Host
Network TierTier 3 β€” Basic operator with some routing infrastructure
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
22sshtcp
Closed Ports25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”
SSH VersionSSH-2.0-OpenSSH_10.0p2 Debian-7+deb13u4

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
30%
23
routing
13%
11
services
21%
22
ownership
27%
23
reputation
17%
12
geolocation
27%
22
Overall22%1013
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-07-25 02:41:46 UTC
Last Seen2026-08-12 19:12:19 UTC
Profile Built2026-08-12 19:14:47 UTC
Data FreshnessLive
Signal Types22
Total Observations24
πŸ” 22 signal types Β· 24 observations collected
This report is generated from 22+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.