216.245.218.90📋 Copy

# IP Intelligence Briefing: 216.245.218.90/32

## Executive Summary

Analysis of IP 216.245.218.90 reveals a low-risk static IP address owned by Limestone Networks, Inc. (LSTN) with minimal threat indicators. The IP is part of a residential proxy service infrastructure with no active malicious campaigns detected.

## Ownership and Network Context

• Organization: Limestone Networks, Inc. (LIMESTONE-NETWORKS)
• ASN: 46475
• CIDR Block: 216.245.192.0/19
• RIR: ARIN
• Network Role: Static residential proxy service
• DNS Hostname: 90-218-245-216.static.reverse.lstn.net

The IP belongs to LSTN's residential proxy network, which provides static IP addresses to end users. This infrastructure is commonly used for web browsing, gaming, and online services rather than malicious activity.

## Risk Assessment

• Overall Risk Score: 20 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence: None detected
• Blacklist Count: 0
• Known Campaigns: None

## Geolocation and Technical Analysis

• Reported Location: Dallas, Texas, US
• Geo Validation: ⚠️ Flagged - RTT discrepancy detected (53ms observed vs 159.9ms minimum possible for 7,997km distance)
• Geolocation Consensus: Inconsistent across multiple sources
• Network Classification: Firewalled / No Services
• Open Ports: None detected
• TLS/HTTP Services: None active

The geolocation anomaly suggests potential IP spoofing or significant data quality issues in the reverse geocoding database. However, this is a common characteristic of residential proxy services where IP assignment may not reflect actual user location.

## Threat Intelligence Signals

• Threat Indicators: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Proxy/VPN: Static residential proxy (legitimate service type)
• Campaign Correlation: None

## Historical Activity (Last Observation Window)

19 observations recorded on 2026-07-29:

• No ownership changes
• No persistent malicious behavior
• No threat persistence indicators
• Geo validation violations present but consistent with proxy service behavior
• Average ownership duration: Insufficient data
• Threat observation count: 0

## Network Neighborhood Analysis

• Subnet: 216.245.218.90/24
• Neighbor Count: 0
• Abuse Density: 0
• High/Medium Risk Neighbors: None
• Active Siblings: None

The IP exists in isolation within its /24 subnet, with no neighboring IP activity detected.

## Relationship Graph

9 relationships identified:

• 4 "Same Network" entries linking to LIMESTONE-NETWORKS
• 5 "DNS Association" entries for the static reverse hostname
• No external relationships to organizations, campaigns, or certificates

## Recommended Security Actions

Based on the low-risk profile and absence of threat indicators, no immediate defensive actions are required:

1. No firewall blocking recommended - IP is part of legitimate residential proxy infrastructure

2. Monitoring level: Standard logging and traffic analysis

3. Threat correlation: Monitor for behavioral changes, not IP-based blocking

4. Geo validation: Note the RTT discrepancy for future reference if location-based policies apply

## Conclusion

IP 216.245.218.90 represents a legitimate residential proxy service from Limestone Networks. The low risk score (20), absence of threat indicators, and clean blacklist status indicate no immediate security concern. The geolocation validation anomaly is consistent with residential proxy network characteristics and does not elevate the risk profile. SOC analysts should treat this as a benign IP requiring standard traffic monitoring rather than threat-based response.

Classification: LOW RISK / MONITOR

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.