# IP Intelligence Briefing: 45.79.109.130
Classification: Low Risk / Cloud Infrastructure IP
Date: Current
Status: Active Observation
## Executive Summary
IP 45.79.109.130 is a cloud infrastructure address associated with Linode (AS63949), located in Fremont, CA, US. The IP presents a low overall risk profile (score: 20) and is classified as "clean" in its immediate subnet. No open services or active connections are currently observed, consistent with a firewalled cloud compute endpoint.
## Ownership and Network Context
- Provider: Linode (AS63949)
- Network: 45.79.0.0/16
- Geolocation: Fremont, CA, US
- Infrastructure Type: CloudCompute
- CIDR Block: 45.79.109.130/32
The IP resolves to hostname 45-79-109-130.ip.linodeusercontent.com with forward DNS confirmed. No reverse DNS anomalies detected.
## Threat Assessment
Current Risk Score: 20 (Low Risk)
Threat Indicators:
- Blacklist Count: 0
- Abuse Confidence Score: Not available
- Known Campaign Associations: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Control Plane:
- Operator Score: 0.2609 (Basic)
- Route Stability: False
- DNSSEC: Valid
- DNSBL Listings: 8 total lists
## Services Analysis
Open Ports: None detected
HTTP/TLS: No active services detected
Banner Analysis: No service banners observed
The IP is currently in a firewalled state with no accessible services, consistent with Linode cloud infrastructure that may have inbound access restricted to specific ports or customers.
## Neighborhood Analysis
Subnet: 45.79.109.130/24
Abuse Density: 0%
Classification: Clean
Total Siblings: 1
Threat Siblings: 0
The /24 subnet shows zero abuse activity and a clean classification. No neighboring IPs flagged as malicious.
## Historical Observations
Total Observations: 23
Observation Period: 2026-08-06 to 2026-08-13
Key Historical Signals:
- 2026-08-13: Recent observation flagged has_threats: true with 50 pulse associations
- 2026-08-06: Subnet classified as "clean" with inherited risk: 0
- Consistent operator scores in the 0.26β0.30 range
The IP has shown stable ownership with no ownership changes recorded. Historical data indicates the IP has been under continuous observation without significant profile degradation.
## Related Entities
- DNS Associations: 45-79-109-130.ip.linodeusercontent.com (multiple associations)
- Network Associations: LINODE (multiple same-network relationships)
## Recommended Actions
Firewall/Network:
- No immediate blocking recommended due to low risk profile
- Monitor for service activation on inbound ports
- Consider rate limiting if used for outbound connections
SOC Context:
- Standard logging recommended for cloud infrastructure IPs
- No correlation with active threat campaigns
- Low priority for investigation unless associated with malicious activity in other contexts
## Risk Indicators Summary
| Metric | Value |
|---|---|
| Risk Score | 20 |
| Provider Score | 0 |
| Authority Score | 0 |
| Abuse Density | 0% |
| Blacklist Count | 0 |
| Open Services | 0 |
Conclusion: 45.79.109.130 is a legitimate Linode cloud infrastructure IP with a clean reputation profile. The low risk score (20) and absence of blacklist associations support continued monitoring without immediate blocking. Historical observations show consistent cloud infrastructure behavior with no evidence of malicious activity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 45.79.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 45-79-109-130.ip.linodeusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 45-79-109-130.ip.linodeusercontent.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-31 05:28:35 UTC |
| Last Seen | 2026-08-13 01:27:33 UTC |
| Profile Built | 2026-08-13 01:46:02 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 25 |
Full dossier details are available via our API.