# IP Intelligence Briefing: 198.58.105.191/32
Date: 2026-08-05
Classification: LOW RISK β Cloud Infrastructure Host
Status: Active Monitoring
## Executive Summary
IP address 198.58.105.191 is a Linode cloud computing endpoint located in Richardson, Texas (US). The IP demonstrates no malicious indicators across all threat intelligence feeds. Classification as "clean" with zero risk score and no observed abuse activity. Recommended action: Continue monitoring; no immediate firewall restrictions required.
---
## Network Profile
| Attribute | Value |
|---|---|
| **IP Address** | 198.58.105.191/32 |
| **ASN** | 63949 |
| **Organization** | Linode |
| **Network Block** | 198.58.96.0/19 |
| **CIDR** | 198.58.105.191/24 |
| **RIR** | ARIN |
| **Infrastructure Type** | CloudCompute |
| **Location** | Richardson, Texas, United States |
| **Reputation** | Low Risk |
| **Risk Score** | 0/100 |
---
## Threat Assessment
Current Risk Indicators
- Abuse Confidence Score: None
- Blacklist Count: 0
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Known Campaigns: None
Service Exposure
- Open Ports: None detected
- TLS Certificates: None
- HTTP Services: None active
- DNS Resolution: 198-58-105-191.ip.linodeusercontent.com
- PTR Record: Confirmed
Control Plane Data
- Operator Score: 0.2609 (Basic)
- Route Stability: False
- DNSSEC Valid: True
- DNSBL Listed: 0/8 lists
---
## Neighborhood Analysis
Subnet: 198.58.105.191/24
- Abuse Density: 0 (Clean)
- Threat Siblings: 0
- Active Siblings: 1
- Total Siblings: 1
- Classification: Clean
No high or medium risk neighbors detected in the /24 subnet.
---
## Historical Observation Summary
Total Observations: 21
Observation Window: 2026-07-30 to 2026-08-05
| Metric | Value |
|---|---|
| **Recent Classification** | Clean |
| **Abuse Density** | 0 |
| **Threat Persistence** | 0 days |
| **Campaign Likelihood** | None |
| **Cert Matches** | 0 |
All historical observations maintain consistent "clean" classification with no escalation in threat indicators.
---
## Relationship Graph
- DNS Associations: 198-58-105-191.ip.linodeusercontent.com
- Network Associations: LINODE (multiple entries)
- Correlated IPs: 0
- Campaign Correlations: 0
---
## Recommended Security Actions
Based on current risk profile (Risk Score: 0, Abuse Density: 0, No Threat Indicators):
| Action | Recommendation |
|---|---|
| **Firewall Rules** | No blocking required; standard allow rules apply |
| **Intrusion Detection** | Monitor for anomalous outbound connections from this IP |
| **Threat Feeds** | No additional monitoring needed |
| **Reputation Checks** | Continue periodic monitoring |
Note: As a Linode cloud infrastructure IP with no open services and no threat indicators, this endpoint represents legitimate cloud hosting activity. No defensive restrictions are warranted at this time.
---
## Intelligence Notes
- IP belongs to Linode's cloud compute infrastructure
- Zero observed malicious activity across all threat feeds
- Clean neighborhood classification with no sibling abuse
- DNSSEC validated; infrastructure shows stable operation
- Historical data confirms persistent benign behavior
Analyst Assessment: This IP address represents legitimate cloud infrastructure activity with no malicious characteristics. Standard defensive monitoring is appropriate; no immediate threat response actions required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 198.58.96.0/19 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 198-58-105-191.ip.linodeusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 198-58-105-191.ip.linodeusercontent.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_10.0p2 Debian-7+deb13u4 |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 2 |
| Overall | 22% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-25 02:41:46 UTC |
| Last Seen | 2026-08-12 19:12:19 UTC |
| Profile Built | 2026-08-12 19:14:47 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.