IP 68.8.107.118 was identified as a residential endpoint assigned to Cox Communications Inc. (ASN 22773) within the 68.8.0.0/16 network block in California. The address maintained a low-risk reputation with a risk score of 20. No active threat indicators were observed, including zero blacklist entries and no association with known malicious campaigns or attacker infrastructure.
Network role analysis classified the IP as a standard residential endpoint. Behavioral assessments recorded zero honeypot hits, enumeration strikes, or WAF violations. DNS hygiene was rated good, with valid SPF and DMARC records. However, operational validation revealed a data contradiction: the claimed geolocation contradicted RTT physics measurements, showing a measured latency of 93ms against a minimum possible threshold of 181.9ms for the claimed distance of 9,094 km.
Due to signal contradictions, the recommendation was classified as Monitor with low severity. No firewall rules were triggered, and the IP was deemed not to require immediate blocking.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Cox Communications Inc. |
| ASN | AS22773 |
| Network Name | NETBLK-SD-RDC-68-8-0-0 |
| CIDR Block | 68.8.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | ip68-8-107-118.sd.sd.cox.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ip68-8-107-118.sd.sd.cox.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User β Residential ISP endpoint |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-10 15:22:31 UTC |
| Last Seen | 2026-09-10 15:22:31 UTC |
| Profile Built | 2026-09-10 15:33:31 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.