68.1.0.27
Intelligence Briefing: 68.1.0.27/32
Overview
The IP address 68.1.0.27/32 belongs to Cox Communications Inc. (ASN 22773) within the 68.1.0.0/19 CIDR block. Geolocation data assigned the address to Pensacola, Florida, US. The address is classified as a Residential Endpoint.
Threat Assessment
Current risk scoring indicates a Low Risk status with a score of 25. The IP is not flagged as a known attacker, Tor exit node, or spam source. However, the address is classified as a "Suspicious Host" with associated tags indicating suspicious activity. Control plane analysis revealed the IP was listed on one of eight DNSBL lists. No open ports, TLS certificates, or HTTP services were detected during the scan.
Technical Anomalies
Data integrity checks identified a contradiction between claimed geolocation and RTT physics measurements. Specifically, the observed RTT of 45ms contradicts the minimum possible RTT of 152.4ms for the reported distance. Route stability was marked false. DNS hygiene scores as Good (60/100) with SPF and DMARC configured for the associated domain.
Recommendation
Analysts are advised to Monitor the address. The severity is Low due to the presence of signal contradictions and mixed threat indicators. No immediate firewall rules were required based on current observations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cox Communications Inc. |
| ASN | AS22773 |
| Network Name | NETBLK-AT-INT-68-1-0-0 |
| CIDR Block | 68.1.0.0/19 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | nrfkdsrj02-ge710.rd.hr.cox.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | nrfkdsrj02-ae0.0.rd.hr.cox.netnrfkdsrj02-ge710.rd.hr.cox.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 27% | 2 | 3 |
| services | 35% | 2 | 3 |
| ownership | 30% | 3 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 27% | 12 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-12 06:54:04 UTC |
| Last Seen | 2026-09-19 15:27:22 UTC |
| Profile Built | 2026-09-19 15:35:50 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 31 |
Full dossier details are available via our API.