216.152.252.16📋 Copy

## IP Intelligence Briefing: 216.152.252.16/32

Classification: Moderate Risk (Score: 40/100)

Organization: Beamspeed LLC (ASN 14237)

Location: Yuma, Arizona, US

Reporting Date: 2026-06-24

---

Executive Summary

IP 216.152.252.16 belongs to Beamspeed LLC, a legitimate ISP infrastructure provider. The IP exhibits moderate risk characteristics with no active threat indicators. The address is dynamically DNS-resolved (ip-216-152-252-16.wireless.dyn.beamspeed.net) and shows no open services or active ports. While the parent /24 subnet shows elevated abuse density, this IP's risk profile remains contained.

---

Technical Profile

• Risk Score: 40/100 (Moderate Risk)
• Network Classification: Firewalled / No Services
• DNS Resolution: Forward confirmed to dynamic hostname
• Email Authentication: SPF and DMARC records present and configured
• Geolocation: Yuma, AZ (2,500km accuracy radius)
• Routing: BGP prefix 216.152.248.0/21, stable origin ASN 14237

---

Threat Assessment

Current Threat Status: CLEAN

• No known attacker indicators
• Not associated with spam campaigns
• No Tor exit node activity
• Zero blacklist hits
• Zero known threat campaigns

Historical Context: 49 signal observations tracked. Recent DNS records show proper SPF/DMARC configuration. Subnet abuse density (0.1367) classified as "mostly_clean" in recent observations.

---

Neighborhood Analysis

/24 Subnet: 216.152.252.0/24

• Abuse Density: High (1.0)
• Active Siblings: 139 of 256 addresses
• Risk Distribution: 100 medium-risk neighbors, 0 high-risk
• Inherited Risk: 40/100

The parent subnet shows elevated activity but remains within ISP infrastructure norms. No immediate correlation to active malicious campaigns.

---

Recommended Actions

Based on risk score and operational context:

Note: These recommendations are probabilistic. Given this is ISP infrastructure with no active threat indicators, consider whether blocking aligns with your security policy.

---

Intelligence Notes

1. Infrastructure Type: Legitimate ISP residential/business service

2. Service Status: No open ports detected (firewalled)

3. Campaign Activity: None correlated

4. Persistence: No persistent malicious activity observed

5. Control Plane: Route stable, DNSSEC valid

---

Analyst Assessment: This IP represents normal ISP infrastructure activity. The moderate risk score reflects subnet-level noise rather than specific malicious behavior. Blocking may be unnecessary unless this IP is generating unwanted inbound/outbound traffic from your perspective.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.