Intelligence Briefing: 68.86.84.30/32
Overview: The IP address 68.86.84.30/32 was identified as a residential endpoint owned by Comcast Cable Communications, Inc. (ASN 7922) within the 68.86.64.0/18 CIDR block. Ownership records indicate a registration under the US ARIN registry.
Geolocation and Network Context: Geolocation data placed the asset in New York, US, though this was contradicted by RTT physics measurements which indicated a distance of 7626km requiring a minimum RTT of 152.5ms against an observed measurement of 25.0ms. The address was assigned a risk score of 25 (Low Risk) with no specific threat indicators, blacklist entries, or known campaign associations detected. The neighborhood classification was "mostly_clean" with an abuse density of 0.0667.
Threat Assessment: Despite the low risk profile, the system classified the host as a "Suspicious Host" with a tag of "suspicious." No active attacks or enumeration strikes were recorded during the observation window from August 29, 2026, to September 5, 2026. The control plane assessment flagged the operator score as "Minimal" and noted route instability.
Recommendation: Intelligence recommendations advised analysts to monitor the address due to present signal contradictions, specifically between claimed geolocation and RTT physics measurements. No immediate firewall rules were generated.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Comcast Cable Communications, Inc. |
| ASN | AS7922 |
| Network Name | COMCAST-E1-4 |
| CIDR Block | 68.86.64.0/18 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | β |
π DNS Intelligence
| PTR | be-1411-cr11.beaumeade.va.ibone.comcast.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | be-1411-cr11.beaumeade.va.ibone.comcast.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User β Residential ISP endpoint |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 7 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 27% | 1 | 7 |
| geolocation | 33% | 2 | 5 |
| Overall | 25% | 10 | 25 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-29 03:30:54 UTC |
| Last Seen | 2026-09-20 06:45:42 UTC |
| Profile Built | 2026-09-23 01:13:48 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 40 |
Full dossier details are available via our API.