68.85.56.2
Intelligence analysis identified the IP address 68.85.56.2/32 as a low-risk endpoint associated with Comcast Cable Communications, LLC (ASN 7922). The address was classified as a residential endpoint with a risk score of 25. No threat indicators were observed, including zero known blacklist entries, no Tor exit activity, and no associations with known attacker campaigns or spam sources. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations.
DNS resolution confirmed a PTR hostname pointing to po-1-xar01.venice.fl.westfl.comcast.net. However, geolocation validation indicated a significant contradiction. While the consensus location placed the endpoint in the United States, RTT physics measurements recorded a distance of 7625 kilometers against a measured RTT of 57 milliseconds, violating the minimum possible RTT of 152.5 milliseconds. This inconsistency contributed to a very low overall confidence score.
The intelligence assessment recommended monitoring the address with low severity due to signal contradictions. No firewall rules were generated. The address first appeared in the dataset on 2026-09-07 and was last observed on 2026-09-08.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Comcast Cable Communications, LLC |
| ASN | AS7922 |
| Network Name | COMCAST-E1-8 |
| CIDR Block | 68.85.32.0/19 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | po-1-xar01.venice.fl.westfl.comcast.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | po-1-xar01.venice.fl.westfl.comcast.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 20% | 1 | 1 |
| services | 28% | 2 | 2 |
| ownership | 28% | 2 | 2 |
| reputation | 20% | 1 | 2 |
| geolocation | 40% | 2 | 3 |
| Overall | 29% | 10 | 13 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 13:25:14 UTC |
| Last Seen | 2026-09-20 14:01:32 UTC |
| Profile Built | 2026-09-22 21:43:37 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 25 |
Full dossier details are available via our API.