192.3.252.25

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP Intelligence Briefing: 192.3.252.25

Date: 2026-06-10

1. Profile Summary

Risk Score: Moderate (50/100)
Provider: RackNerd LLC (ASN 36352)
Geolocation: Chicago, IL, US
Network: 192.3.252.0/24 (arin-registed)
Services: No open ports or TLS certificates detected.
Threat Indicators: No malicious activity, spam, or known attacker associations.

2. Observation History

DNSSEC Valid: Confirmed.
Traceroute: 22 hops via Comcast and Cogent, reached target.
Ownership Stability: No recent changes (0 ownership changes).
Threat Persistence: No persistent malicious activity observed.

3. Relationships

DNS Associations: Linked to `192-3-252-25-host.colocrossing.com` (4 instances).
Network: Same subnet (`CC-192-3-252-0-24`).
No Known Campaigns or Malicious Entities: No correlations to threat feeds.

4. Neighborhood Analysis

Subnet Abuse Density: 0% (no malicious neighbors).
Active Siblings: 0 (no neighboring IPs in the /24 subnet).

5. Recommendations

Monitor DNS: Investigate `colocrossing.com` for potential spoofing or misconfigurations.
Check Email Security: Verify SPF/DKIM alignment for domains associated with this IP.
Baseline Traffic: Track future changes in ownership or service activity due to moderate risk score.

Conclusion:

The IP is registered to a US-based provider with no direct malicious indicators. However, the limited DNS diversity and lack of network activity warrant further monitoring. SOC teams should prioritize DNS integrity checks and ensure no unexpected service emergence in the subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	WA
City	Seattle
Timezone	—
Latitude	47.61
Longitude	-122.33

🏢 Ownership & Registration

Organization	RackNerd LLC
ASN	AS36352
Network Name	CC-192-3-252-0-24
CIDR Block	192.3.252.0/24
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	192-3-252-25-host.colocrossing.com
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnames	`192-3-252-25-host.colocrossing.com`

🔐 DNS Hygiene

Hygiene Score	60% (Good)
SPF	Present
DMARC	Present
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Unknown
Service Purpose	Firewalled / No Services
Network Tier	Unknown — Insufficient routing data to classify

No specific classification

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	13%	1	1
routing	13%	1	1
services	13%	1	1
ownership	30%	2	3
reputation	0%	0	0
geolocation	13%	1	1
Overall	14%	6	7

Coverage: 5/6 dimensions · Data sufficiency: partial

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-05-23 12:22:47 UTC
Last Seen	2026-06-10 07:46:10 UTC
Profile Built	2026-06-10 07:50:06 UTC
Data Freshness	Live
Signal Types	19
Total Observations	20

🔍 19 signal types · 20 observations collected

This report is generated from 19+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

192.3.252.25📋 Copy