68.225.62.57
68.225.62.57 is an IPv4 address operated by Cox Communications (AS22773), geolocated to New York, United States. It belongs to a residential connection with reverse DNS name wsip-68-225-62-57.pn.at.cox.net. As of November 7, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected.
IP address 68.225.62.57 was observed on October 30, 2026, with a High Risk reputation score of 80. Registration records indicate ownership by Cox Communications (AS22773) in New York, US, though geolocation validation noted a contradiction between the claimed location and RTT physics measurements. The host was listed on four DNS blocklists and identified as a Blacklisted Host. Network role classification indicated Residential status with Web Server capabilities, with open ports 80, 443, and 22 returning a 503 HTTP status code. Despite the local subnet being classified as clean, the threat actor type remained Blacklisted Host. The recommendation was to block the IP immediately due to critical severity and high risk evidence.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cox Communications |
| ASN | AS22773 |
| Network Name | NETBLK-AT-CBS-68-225-56-0 |
| CIDR Block | 68.225.56.0/21 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | wsip-68-225-62-57.pn.at.cox.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | wsip-68-225-62-57.pn.at.cox.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 4/4 domains |
| DMARC | 4/4 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Web Server |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | — |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2023-09-02T10:48:52+00:00 |
| Valid Until | 2048-09-02T10:48:52+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 9132 days |
🛡️ Public Network Snapshot
| Origin ASN | AS22773 |
| Network Prefix | 68.225.62.0/24 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 34% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 23% | 2 | 3 |
| ownership | 12% | 2 | 2 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 2 |
| Overall | 21% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-15 16:16:56 UTC |
| Last Seen | 2026-11-07 06:49:54 UTC |
| Profile Built | 2026-11-07 06:51:19 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 32 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 68.225.62.57
Who owns the IP address 68.225.62.57?
68.225.62.57 is registered to Cox Communications. The address falls within the 68.225.56.0/21 network block. Registration is held at ARIN.
Where is 68.225.62.57 located?
Geolocation data places 68.225.62.57 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 68.225.62.57 malicious or safe?
68.225.62.57 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 68.225.62.57?
The reverse DNS (PTR) record for 68.225.62.57 is wsip-68-225-62-57.pn.at.cox.net. This hostname is forward-confirmed, meaning it resolves back to the same address.
What ports are open on 68.225.62.57?
Responsive ports observed on 68.225.62.57 include 80, 443, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.
Is 68.225.62.57 a VPN, proxy, or data center address?
68.225.62.57 is classified as a residential network based on network ownership and behavioural analysis.