216.49.131.67
IP INTELLIGENCE BRIEFING: 216.49.131.67/32
Classification: LOW RISK
Risk Score: 25/100
Date: 2026-07-26
Analyst: IPDebrief Intelligence
---
EXECUTIVE SUMMARY
IP 216.49.131.67 is a low-risk residential/corporate endpoint with minimal threat indicators. The address belongs to NetSpeed LLC (ASN 395748) and shows no active malicious activity. No recommended security actions are required based on current data.
---
OWNERSHIP & INFRASTRUCTURE
- AS Number: 395748 (NetSpeed LLC, United States)
- BGP Prefix: 216.49.131.0/24
- Registration: 2021-11-24
- RIR: ARIN
- Route Stability: Unstable (route changes detected in 30-day window)
Geolocation Signals:
- Primary: United States, New York (US-NY)
- Secondary: United States, Waterbury, Connecticut (observed in 2026-07-26 probes)
- Note: Geographic inconsistency detected between observation sources
---
THREAT INDICATORS
- Risk Score: 25 (Low Risk)
- Blacklist Status: 1 of 8 DNSBL listings (max severity: high)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Known Campaigns: None identified
- Threat Feeds: Clean
Behavioral Signals:
- Open Ports: None detected
- TLS Certificates: None
- DNS Records: No reverse PTR records
- Service Purpose: Firewalled / No Services
---
NETWORK NEIGHBORHOOD
- Subnet: 216.49.131.0/24
- Abuse Density: 0 (No abuse in /24)
- Related Threats: 0 sibling IPs flagged
- Classification: No inherited risk
---
RELATIONSHIP MAPPING
- Related Entities: None detected
- Hostnames/Organizations: No associations
- Certificates: None
- Connected Infrastructure: Isolated address
---
OBSERVATION HISTORY (12 signals tracked)
Recent activity shows:
- 2026-07-26T22:22:55: ASN and prefix confirmed via Team Cymru DNS
- 2026-07-26T22:22:58: DNSBL listings detected (8 total, 1 listed with high severity)
- 2026-07-26T22:23:50: Geolocation updated to Waterbury, CT (MaxMind GeoLite2)
- 2026-07-26T22:22:55: DNSSEC validation confirmed (valid)
- 2026-07-26T22:22:55: No PTR records found
---
NETWORK TRAVERSAL
- Hop Count: 29
- Transit Networks: Comcast, Cogent
- First Hop RTT: 0.2ms
- Last Hop RTT: 28.4ms
- Timed Out Hops: 18 (suggests some path instability)
---
SECURITY RECOMMENDATIONS
Based on current risk profile, no immediate firewall rules or blocking actions are recommended. The IP presents minimal threat characteristics with no active malicious indicators. Continue standard monitoring practices.
Monitoring Parameters:
- Track DNSBL listing status for changes
- Monitor for new open ports or service launches
- Watch for geolocation consistency (NY vs CT discrepancy may indicate proxy usage)
---
CONCLUSION
This IP address is currently operating within acceptable risk parameters. The low risk score (25), absence of active threat indicators, and clean neighborhood profile support treating this as a benign endpoint. No special handling required beyond standard network security practices.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | NetSpeed LLC |
| ASN | AS395748 |
| Network Name | NL-407 |
| CIDR Block | 216.49.128.0/20 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS395748 |
| Network Prefix | 216.49.131.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 5 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 14% | 1 | 3 |
| geolocation | 17% | 2 | 3 |
| Overall | 15% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 20:39:16 UTC |
| Last Seen | 2026-09-03 18:50:04 UTC |
| Profile Built | 2026-09-03 18:52:48 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 216.49.131.67
Who owns the IP address 216.49.131.67?
216.49.131.67 is registered to NetSpeed LLC. The address falls within the 216.49.128.0/20 network block. Registration is held at ARIN.
Where is 216.49.131.67 located?
Geolocation data places 216.49.131.67 in Waterbury, Connecticut, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 216.49.131.67 malicious or safe?
216.49.131.67 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.