4.69.200.126
Intelligence analysis classified IP 4.69.200.126/32 as Low Risk with a risk score of 25. The address belongs to Level 3 Parent, LLC (ASN 3356) within the 4.0.0.0/9 block.
During the observation window from August 29, 2026, to September 6, 2026, scans detected no open ports. The host was identified as firewalled with no active services. DNS resolution returned a PTR record of ae5.5.ebr2.Washington1.net.lumen.tech. Email authentication records confirmed SPF and DMARC presence.
Geolocation attribution placed the host in New York, US. However, RTT physics validation recorded a contradiction between the claimed location and network latency. Measurements showed a 23.0ms RTT against a calculated minimum possible RTT of 152.5ms for the 7625.7km distance. Transit networks identified included Comcast and Lumen.
Threat indicators showed no association with known campaigns, spam sources, or DNS blacklists. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. The neighborhood assessment classified the subnet as clean.
The recommendation was to monitor the address due to signal contradictions between network latency and geographic claims. No immediate blocking action was required, but continued observation was advised.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Level 3 Parent, LLC |
| ASN | AS3356 |
| Network Name | LVLT-ORG-4-8 |
| CIDR Block | 4.0.0.0/9 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ae5.5.ebr2.Washington1.net.lumen.tech |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ae5.5.ebr2.Washington1.net.lumen.tech |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 38% | 2 | 5 |
| Overall | 25% | 10 | 19 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 15:29:10 UTC |
| Last Seen | 2026-09-22 06:23:16 UTC |
| Profile Built | 2026-09-22 06:30:25 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 34 |
Full dossier details are available via our API.