216.151.130.14📋 Copy

# IP Intelligence Briefing: 216.151.130.14/32

Classification: Moderate Risk / High-Abuse Subnet Context

Date: 2026-06-24

Analysis Period: Current observations (47 historical signals)

## Executive Summary

IP address 216.151.130.14 is assigned to Cisco Webex LLC (ASN 13445) with a moderate risk score of 40. The IP operates within subnet 216.151.130.0/24, classified as high_abuse with 256 total sibling IPs and 158 active. While the target IP shows no direct threat indicators, its subnet-level abuse density warrants contextual monitoring.

## Ownership & Geolocation

• Organization: Cisco Webex LLC
• ASN: 13445
• Country: United States (US)
• Region: California (CA)
• City: San Jose
• Geolocation Confidence: 35% (accuracy radius: 2,500 km)
• Registration: ARIN

## Risk Assessment

• Overall Risk Score: 40/100 (Moderate)
• Operator Score: 0.1304 (Minimal)
• Abuse Confidence Score: Not populated
• Blacklist Count: 0 (current)
• DNSBL Listed: 1 of 8 total lists

## Network & Service Analysis

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• CDN/Cloud/Proxy/VPN: No classification detected

## Threat Indicators

• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Known Campaigns: None detected
• Cert Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

## Subnet Context (216.151.130.0/24)

• Abuse Density: 1.0 (high_abuse classification)
• Total Siblings: 256
• Active Siblings: 158
• Sample Neighbor Risk Distribution: 100 medium-risk IPs observed (40/50 risk/authority scores)
• Threat Siblings: 256 identified

## Historical Observations (47 Total Signals)

Recent observations indicate consistent minimal-risk operator scoring across multiple timeframes:

• 2026-06-24 18:05:35 UTC — Minimal operator score (0/8)
• 2026-06-24 12:03:43 UTC — Minimal operator score (0/8)
• 2026-06-24 06:01:47 UTC — Minimal operator score (0/8)
• Geographic signals observed with US classification (confidence 0.35)

## Control Plane & Routing

• BGP Prefix: 216.151.128.0/20
• Origin ASN: 13445
• Route Stability: False (0 route changes in 30 days)
• RPKI State: Not evaluated
• IRR Consistency: Not evaluated
• DNSSEC: Valid

## Recommended Actions for SOC Analysts

1. Contextual Monitoring: Monitor subnet 216.151.130.0/24 for elevated activity given high_abuse classification despite target IP's clean profile.

2. Baseline Establishment: Establish traffic baselines for Cisco Webex traffic from this subnet; deviations may indicate misconfigured services or policy violations.

3. DNSBL Verification: Investigate the 1 DNSBL listing associated with this IP.

4. Neighbor Correlation: Cross-reference activity with 158 active sibling IPs in the /24 block for coordinated behavior patterns.

## Risk Determination

Current Threat Level: LOW-MODERATE

Primary Concern: Subnet-level abuse context rather than direct threat indicators from target IP.

Recommended Action: Monitor but no immediate blocking required unless activity patterns deviate from established Cisco Webex baselines.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.