24.116.247.174📋 Copy

## INTELLIGENCE BRIEFING: 24.116.247.174

Classification: Moderate Risk Residential Endpoint

Date of Analysis: Current

Risk Score: 40/100

Network Profile

The IP address 24.116.247.174 belongs to CABLE ONE, INC. (ASN 11492) within the 24.116.0.0/15 CIDR block. Geolocation data places the address in Seattle, Washington, US. The IP resolves to a residential endpoint with PTR hostname 24-116-247-174.cpe.sparklight.net under the sparklight.net domain. No active open ports or listening services were detected during service enumeration.

Threat Indicators

The IP maintains a moderate risk profile with an overall reputation score of 40. The control plane indicates the IP is listed on 2 out of 8 DNSBL entries. Abuse confidence scores remain unquantified in current data. No known threat campaigns, blacklisted campaigns, or known attacker indicators were identified. The IP is not associated with Tor exit nodes, CDN infrastructure, cloud hosting, proxy services, or mobile carrier networks.

Email Infrastructure

The associated sparklight.net domain implements SPF records (v=spf1 ip4:64.8.70.47/32 -all) but lacks DMARC policy configuration. Three TXT records exist for the domain. The IP itself does not have email reputation scoring data available.

Historical Signals

Observation history contains 16 recorded signals. Recent observations (July 2026) include DNSSEC validation (dnssec_valid: true), ASN prefix confirmations, and SPF record presence. DNS-related signals show forward resolution to the CPE hostname with consistent PTR records. No persistent malicious activity flags were observed in the temporal analysis.

Network Relationships

Three relationships were identified: two same-network associations to CABLEONE infrastructure and one DNS association to the host CPE hostname. No certificate associations or organizational links were detected.

Neighborhood Analysis

The /24 subnet 24.116.247.0/24 shows zero detected neighbors. Abuse density registers at 0, with no high, medium, or low-risk sibling IPs identified in the neighborhood. This indicates an isolated residential endpoint rather than part of a compromised network block.

Operational Context

The traceroute indicates 30 hops with Comcast transit networks, suggesting the IP traverses standard ISP infrastructure. Route changes over the past 30 days register at 0, indicating network stability. RPKI validation status remains unconfirmed in current data.

Recommended Actions

No specific firewall or blocking rules were generated from the IP's risk profile. The moderate risk score with residential classification and lack of active threat indicators suggests standard monitoring is appropriate rather than immediate blocking.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.