Analysis of IP address 64.98.11.102/32 identified ownership under Ting Fiber Inc. (ASN 32133) within the TF-CORE network block (64.98.10.0/23). The entity classified the address as low risk with a risk score of 25. No specific threat indicators were detected, including no known attacker association or spam source classification. Blacklist enumeration returned zero counts in the primary threat assessment, though one DNSBL listing was noted in control plane data.
Network role assessment determined the address was firewalled with no active services open. DNS resolution confirmed forward and reverse connectivity to tingfiber.net infrastructure, specifically resolving to et-0-1-5.0.br01-cnco01.tingfiber.net. SPF records were present, while DMARC configuration was absent.
Geolocation data indicated a Canadian origin, however, RTT physics measurements contradicted this claim. Distance metrics suggested a 7,625.7km separation with a minimum possible RTT of 152.5ms, whereas observed measurements recorded 61.0ms. Neighborhood analysis classified the subnet (64.98.11.102/24) as clean with zero abuse density. No active incidents, honeypot strikes, or WAF violations were recorded during the observation period.
Intelligence recommendation prioritized monitoring due to signal contradictions present in the geolocation and RTT validation data. No immediate firewall rules were required based on current severity ratings.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Ting Fiber Inc. |
| ASN | AS32133 |
| Network Name | TF-CORE |
| CIDR Block | 64.98.10.0/23 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | et-0-1-5.0.br01-cnco01.tingfiber.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | et-0-1-5.0.br01-cnco01.tingfiber.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 50% | 2 | 3 |
| reputation | 25% | 1 | 1 |
| geolocation | 35% | 2 | 2 |
| Overall | 34% | 10 | 11 |
| Data Coherence | Mixed Signals (60%) โ 2 contradiction(s) |
| Attribution | Low (40%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
โ Geo sources disagree on country: US, CA
๐ Observation Timeline ๐ Live
| First Seen | 2026-09-19 09:30:59 UTC |
| Last Seen | 2026-09-19 09:30:59 UTC |
| Profile Built | 2026-09-19 09:41:06 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.