24.117.49.44📋 Copy

IP INTELLIGENCE BRIEFING: 24.117.49.44

Classification: Residential Infrastructure (Low Risk)

Date of Analysis: 2026-07-27

Intel Level: Standard

---

**EXECUTIVE SUMMARY**

IP address 24.117.49.44 is a residential endpoint associated with Cable One, Inc. (ASN 11492) in Seattle, Washington. Current risk assessment indicates low threat posture with zero risk score. The IP maintains active SSH services and has been observed with some blacklist listings, though overall abuse indicators remain minimal.

---

**OWNERSHIP & GEOLOCATION**

• Organization: CABLE ONE, INC.
• Netname: CABLEONE
• CIDR Block: 24.116.0.0/15
• ASN: 11492
• Country: United States (US)
• Region: Washington (US-WA)
• City: Seattle
• Registration: ARIN (1996-09-25)

---

**NETWORK CLASSIFICATION**

• Network Role: Residential
• Infrastructure Type: Single-Service Host
• Connection Type: Residential broadband
• Proxy/VPN/Tor: Negative across all indicators
• Cloud/CDN: Negative
• Anycast: Negative

---

**THREAT POSTURE**

• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Associations: None identified

Historical Observations:

• 15 signal observations recorded over monitoring period
• Recent observations (2026-07-27) show DNSSEC validation enabled
• Domain resolution observed to sparklight.net
• SPF policy configured; DMARC not implemented
• Listed on 8 threat feeds with 3 high-severity listings

---

**ACTIVE SERVICES**

• Port 22 (TCP/SSH): Open

- Banner: SSH-2.0-dropbear_2020.81

- Configuration: Standard SSH with curve25519-sha256 key exchange

• DNS: Forward resolution not configured
• TLS/HTTP: No active web services or certificates observed

---

**NEIGHBORHOOD ANALYSIS**

• Subnet: 24.117.49.0/24
• Abuse Density: 0
• Threat Siblings: 0
• Active Siblings: 0
• Classification: Clean subnet

---

**RELATIONSHIPS**

• Same Network: CABLEONE
• Related Hostnames: sparklight.net
• Organization Links: Cable One infrastructure

---

**RECOMMENDED ACTIONS**

No immediate security actions required based on current risk profile. For defensive monitoring:

1. Passive Monitoring: Observe but do not block; risk score remains at zero

2. Email Security: Note SPF present but DMARC absent on sparklight.net domain

3. Network Traffic: SSH port 22 may warrant inbound traffic monitoring if not expected

4. Baseline: Establish baseline for residential broadband activity patterns

---

**INTEL CONCLUSION**

This IP represents legitimate residential infrastructure from Cable One with no active malicious indicators. The zero risk score and clean neighborhood metrics support normal traffic patterns. No firewall blocking or threat mitigation required at this time.

Recommendation: Continue passive monitoring; no immediate action needed.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.