50.116.25.197
Intelligence Briefing: IP Address 50.116.25.197/32
Summary Assessment
The IP address 50.116.25.197 is classified as Low Risk with a risk score of 25. The address is hosted on Linode (ASN 63949) within the LINODE network block (50.116.0.0/18). Infrastructure classification identifies the host as cloud compute infrastructure with hosting capabilities enabled.
Ownership and Registration
The IP is registered to Linode (Organization: LINODE), operating under AS63949. Registration falls under ARIN jurisdiction for the United States. The network block covers the 50.116.0.0/18 CIDR range.
Geolocation
Geolocation data places the IP address in Richardson, Texas, United States (US). Coordinates: 32.95°N, -96.73°W. Timezone: America/Chicago. Geo consensus is marked as true with a count of 1 source.
Network Services and Ports
No open ports were detected. The services field indicates "Firewalled / No Services." No TLS certificates, HTTP titles, or server banners were observed. The infrastructure is classified as CloudCompute with isHosting set to true.
DNS Analysis
Reverse DNS (PTR) resolution returned: 50-116-25-197.ip.linodeusercontent.com. Forward resolution was confirmed with a single forward hostname matching the PTR record. The associated domain is linodeusercontent.com. No SPF or DMARC records were observed.
Threat Indicators
No active threat indicators were detected. The IP is not identified as a Tor exit node, known attacker, or spam source. Blacklist count is 0. Known campaigns: none observed. No threat feed matches.
Control Plane Observations
Route stability is marked as false (isRouteStable). The origin ASN is 63949 with BGP prefix 50.116.16.0/20. DNSSEC is valid. One DNSBL listing was found out of 8 total lists checked. RPKI state and IRR consistency data were not populated.
Neighborhood Analysis
The /24 subnet (50.116.25.0/24) contains no sibling IPs in the neighborhood data. Abuse density is 0. No high, medium, or low-risk neighbors were identified.
Relationship Graph
Four relationships were identified, all DNS associations pointing to 50-116-25-197.ip.linodeusercontent.com. One relationship indicates same network membership with LINODE.
Temporal History
Thirteen observations were recorded in the observation history. Recent signals (2026-08-13) confirmed Linode ownership, ARIN registration, and Texas geolocation. Operator score remains at 0.2609 (Basic) with signal count of 3 out of 8 maximum. Historical data shows consistent ownership without changes.
Recommended Actions
No specific security actions or firewall rules were recommended by the analysis. The IP presents a low-risk profile typical of cloud infrastructure.
Intelligence Conclusion
IP 50.116.25.197 is a Linode cloud compute host in Richardson, Texas. The IP shows no malicious indicators, no open services, and a stable risk profile. The single DNSBL listing does not correlate with known threat activity. This IP does not require immediate defensive action but should be monitored as part of the broader Linode network.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Linode |
| ASN | AS63949 |
| Network Name | LINODE |
| CIDR Block | 50.116.0.0/18 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 50-116-25-197.ip.linodeusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 50-116-25-197.ip.linodeusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 32% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-06 12:48:25 UTC |
| Last Seen | 2026-08-30 21:56:17 UTC |
| Profile Built | 2026-08-30 22:05:20 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 25 |
Full dossier details are available via our API.