216.110.127.92📋 Copy

# IP Intelligence Briefing: 216.110.127.92/32

Classification: LOW RISK

Date: Current Analysis

Analyst: Automated Threat Intelligence System

---

## EXECUTIVE SUMMARY

IP address 216.110.127.92 presents a LOW RISK profile (Risk Score: 15/100). The address is associated with Cable & Wireless (Grenada) Limited, ASN 46650. No active threat indicators were detected. The IP exhibits minimal network activity with services in a firewalled/no-service state. While the address shows minor DNSBL presence, no known malicious campaigns or persistent attacker behavior was observed.

---

## OWNERSHIP AND INFRASTRUCTURE

Network Details:

• ASN: 46650 (Cable & Wireless (Grenada) Limited)
• Organization: CWBAR-GND8
• CIDR Block: 216.110.127.0/24
• Registration Date: Not available via RIR data
• RIR Registry: ARIN

Geolocation:

• Country: United States (US)
• Region: New York (US-NY)
• GeoValidation: Mixed consensus from 2 sources; geoPlausible flag: false
• Note: ASN registration indicates Grenada (BB), while geolocation shows US—routing anomaly may indicate transit or peering relationships

Control Plane:

• BGP Prefix: 216.110.126.0/23
• Route Stability: Unstable (routeChanges30d: 0 but isRouteStable: false)
• DNSSEC: Valid
• RPKI State: Not available

---

## THREAT ASSESSMENT

Risk Profile:

• Overall Risk Score: 15/100 (Low Risk)
• Abuse Confidence Score: Not available
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0 (active)
• Threat Persistence Days: 0

Threat Indicators:

• No active threat indicators detected
• No known campaign associations
• No threat feed matches
• No pulsedive risk scoring available

DNSBL Status:

• Listed on 1 of 8 DNSBL lists
• Severity: Medium (per historical observation)
• This represents minor reputation concern but not active blocking

---

## NETWORK SERVICES AND FINGERPRINTING

Service State:

• Open Ports: None detected
• Connection Type: Firewalled / No Services
• Infrastructure Type: Not classified as CDN, Cloud, VPN, Proxy, or Hosting
• Mobile/Residential: No

Fingerprinting:

• Server Identification: Not available
• HTTP Features: None detected
• TLS Certificate: Not present
• Headers: No HSTS, CSP, or referrer policy headers present

---

## OBSERVATION HISTORY

Signal History (14 observations):

• Most Recent: 2026-07-26 22:22:58 UTC
• Observation Types: Blacklist listings, DNSSEC validation, ASN attribution, PTR resolution

Key Historical Signals:

• DNSSEC validation confirmed on reverse zone (92.127.110.216.in-addr.arpa)
• ASN 46650 attributed to Columbus Communications Grenada Ltd (BB) in historical data
• 8 total DNSBL listings detected historically, with 1 currently active listing (medium severity)
• No persistent malicious behavior detected

Temporal Analysis:

• Ownership Changes: 0
• Threat Observation Count: 1
• Not classified as persistently malicious

---

## NEIGHBORHOOD ANALYSIS

Subnet Context: 216.110.127.0/24

• Abuse Density: 0
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

Neighbor Details:

• 216.110.127.37: Risk Score 40/100 (Medium Risk), Authority Score 50
• Risk Distribution: 1 medium risk neighbor, 0 high/low risk neighbors
• Subnet Classification: Not available

---

## NETWORK TRACEROUTE

Path Analysis:

• Hop Count: 29
• First Hop RTT: 0.2ms
• Last Hop RTT: 140.3ms
• Timed Out Hops: 13
• Transit Networks: Comcast, Cogent
• Network Classification: Multi-hop enterprise path

---

## EMAIL REPUTATION

• Email Reputation: Not available
• Sender Score: Not available
• SPF/DMARC: Not configured (no hosted domains)

---

## RECOMMENDED ACTIONS

Firewall/Blocking Recommendations:

• Action: Monitor or allow based on context
• Rationale: Low risk profile (15/100) with no active threat indicators
• If Blocking Required: Due to DNSBL listing and neighbor medium-risk activity

Monitoring Recommendations:

• Monitor for changes in DNSBL listing status
• Track route stability changes on BGP prefix 216.110.126.0/23
• Watch for service activation on previously firewalled address

No Immediate Blocking Advised:

• IP does not match known attack patterns
• No active threat intelligence correlates
• Neighbor 216.110.127.37 (risk score 40) should be monitored separately

---

## CONCLUSION

IP 216.110.127.92 is a low-risk address with minimal threat indicators. The primary concern is a single DNSBL listing of medium severity. The address shows no evidence of malicious activity, and network services remain inactive/firewalled. No immediate defensive action is required, though routine monitoring is recommended for any changes in blacklist status or service activation. The associated subnet contains one medium-risk neighbor that warrants periodic review.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.