216.152.249.183📋 Copy

# INTELLIGENCE BRIEFING: 216.152.249.183

## Executive Summary

IP 216.152.249.183 is a residential/cellular consumer endpoint operated by Beamspeed LLC (ASN 14237), registered in Yuma, Arizona. The address presents minimal threat characteristics with a risk score of 25 and no active malicious indicators. Classification: LOW RISK / CONSUMER ENDPOINT.

---

## Network Identity

• IP Address: 216.152.249.183/32
• Organization: Beamspeed LLC
• ASN: 14237
• Geolocation: United States, Arizona (Yuma)
• DNS Hostname: ip-216-152-249-183.wireless.dyn.beamspeed.net
• Network Type: Residential/Cellular Provider (wireless.dyn domain indicates dynamic addressing)

---

## Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable (no active threats)
• Blacklist Status: 0 lists (DNSBL: 1/8 lists)
• Threat Indicators: None detected
• Known Campaigns: No associations
• Is Tor Exit: No
• Is Proxy/VPN: No
• Is Hosting: No

---

## Technical Profile

• Services: Firewalled / No Services Detected
• Open Ports: None
• SSL/TLS Certificates: None
• Email Reputation: Not scored (consumer endpoint)
• PTR Record: ip-216-152-249-183.wireless.dyn.beamspeed.net

---

## Neighborhood Analysis

Subnet: 216.152.249.0/24

• Subnet Classification: Mixed
• Abuse Density: 0.3828 (elevated but not anomalous)
• Total Siblings: 256
• Active Siblings: 162
• Threat Siblings: 98
• Risk Distribution: 0 High | 35 Medium | 65 Low
• Inherited Risk Score: 15

The subnet shows typical residential ISP patterns with elevated but not malicious activity levels. The target IP falls within normal operational parameters.

---

## Threat History

• Observation Count: 45 signals
• Recent Activity: Minimal threat signals (confidence 0.30-0.75)
• Threat Persistence: 0 days
• Ownership Changes: 0 (stable)
• Last Observed: 2026-06-24
• Trend: Stable/No escalation detected

---

## Intelligence Relationships

• DNS Associations: Dynamic hostname (wireless.dyn.beamspeed.net)
• Network Associations: BEAMS network
• Correlated IPs: 0 malicious correlations
• Certificate Matches: 0
• Campaign Correlations: None

---

## Recommended Actions

Based on the low-risk profile and consumer endpoint classification:

1. Monitor: Standard logging for outbound connections

2. Block: No action required

3. Allow: Permissive policy appropriate for residential IP

Firewall Rule (Recommended):

```

# No action required - low risk consumer endpoint

# If monitoring is desired:

iptables -A INPUT -s 216.152.249.183/32 -j ACCEPT

```

---

## Analyst Notes

This IP address represents a standard residential/cellular endpoint with no threat indicators. The dynamic DNS hostname and cellular provider infrastructure type are consistent with consumer mobile broadband usage. The subnet's abuse density (0.3828) and inherited risk (15) are within expected ranges for residential networks. No defensive action is required beyond standard logging practices.

Classification: LOW RISK / FALSE POSITIVE PATTERN

Priority: LOW

Action: NO ACTION REQUIRED

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.