An intelligence profile was compiled for IP 24.153.89.210, classifying the endpoint as a low-risk residential connection owned by Comcast Cable Communications, LLC (ASN 7922). Ownership records linked the address to the COMCAST-E1-17 block in Chicago, IL, though geolocation validation noted a contradiction between the claimed physical distance and RTT physics measurements. The IP maintained a risk score of 25 with no active open ports or services detected, resulting in a firewalled status.
Threat indicators flagged the host as a suspicious endpoint with signal contradictions present, specifically regarding geolocation consistency. No specific campaigns, blacklist listings, or known attacker associations were identified. Neighborhood analysis of the 24.153.89.210/24 subnet showed an abuse density of 0.2, classifying the area as mostly clean with one threat sibling.
Recommendations advised monitoring the IP due to signal contradictions and low confidence levels in data sufficiency. Observations recorded between September 10 and September 19, 2026, indicated no persistent malicious behavior, maintaining a low-severity rating suitable for passive surveillance.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Comcast Cable Communications, LLC |
| ASN | AS7922 |
| Network Name | COMCAST-E1-17 |
| CIDR Block | 24.153.64.0/19 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | β |
π DNS Intelligence
| PTR | po-1-rur301.romeoville.il.chicago.comcast.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | po-1-rur301.romeoville.il.chicago.comcast.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | End-User β Residential ISP endpoint |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 28% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-10 18:39:12 UTC |
| Last Seen | 2026-09-19 17:26:22 UTC |
| Profile Built | 2026-09-19 17:37:13 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 30 |
Full dossier details are available via our API.