209.244.0.12
Intelligence assessment classified IP 209.244.0.12 as Low Risk with a risk score of 25. Ownership records identified the address under Level 3 Parent, LLC (ASN 3356) within the 209.244.0.0/14 CIDR block. Reverse DNS resolution returned dnssec2.level3.net with forward confirmation enabled, while the system was geolocated to Denver, CO, US. A geolocation contradiction was recorded, where claimed location data conflicted with RTT physics measurements showing a 20ms latency against a minimum possible 152.5ms for the reported distance.
Network analysis indicated the system was firewalled with no active services detected on open ports. Behavioral metrics showed zero incidents, no known campaigns, and zero honeypot strikes. While the primary threat section blacklist count registered zero, control plane analysis noted one DNS blacklist listing out of eight total lists. The immediate subnet, 209.244.0.12/24, was classified as clean with an abuse density of 0. Route stability status was recorded as false. A recommendation to monitor was issued due to signal contradictions present in the data, specifically regarding geolocation physics and route stability status.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Level 3 Parent, LLC |
| ASN | AS3356 |
| Network Name | LEVEL3-CIDR |
| CIDR Block | 209.244.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | dnssec2.level3.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | dnssec2.level3.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 33% | 2 | 4 |
| Overall | 26% | 10 | 20 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 05:35:51 UTC |
| Last Seen | 2026-09-18 14:00:53 UTC |
| Profile Built | 2026-09-18 14:13:21 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 35 |
Full dossier details are available via our API.