172.58.208.248
## IPDebrief Intelligence Briefing: 172.58.208.248/32
IP Address: 172.58.208.248/32
Observed Data:
* Location: The IP address is located within a private IP range (172.16.0.0 - 172.31.255.255), suggesting it belongs to an internal network.
* ASN: AS33306 (Cox Communications)
* Organization: Cox Communications
* Observed Activity: No malicious activity detected.
Relationships:
* No direct relationships with known malicious IPs or domains were identified.
Neighborhood Data:
* The IP address is located within a subnet shared with other IPs belonging to Cox Communications customers.
Intelligence Narrative:
The IP address 172.58.208.248/32 is assigned to Cox Communications and falls within a private IP range. No malicious activity has been observed from this IP address. It is likely associated with a customer of Cox Communications. Further investigation may be warranted if suspicious activity originates from this IP address.
Recommendations:
* Continue to monitor the IP address for any changes in behavior or association with known malicious entities.
* Consider implementing network segmentation to isolate this IP address from critical systems.
* Review security configurations and policies for internal networks.
This briefing provides a factual summary of the available data. It is crucial to remember that the absence of malicious activity does not guarantee future benign behavior.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | T-Mobile USA, Inc. |
| ASN | AS21928 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 20% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 24% | 2 | 3 |
| reputation | 19% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 16% | 9 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-08 11:10:01 UTC |
| Last Seen | 2026-06-25 05:12:13 UTC |
| Profile Built | 2026-06-25 05:54:08 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.