68.86.85.170
Intelligence Briefing: 68.86.85.170/32
Target Overview
The address 68.86.85.170/32 was identified as a residential endpoint owned by Comcast Cable Communications, Inc. (AS7922). The IP resides within the 68.86.64.0/18 block and resolves to the hostname `be-304-cr22.nashville.tn.ibone.comcast.net`.
Risk Assessment
The IP was classified as Low Risk with an overall risk score of 25. The neighborhood subnet 68.86.85.0/24 was marked as clean with zero threat siblings. No active threat indicators, known campaigns, or spam source activity were observed.
Threat Indicators and Reputation
Threat indicators remained empty. The address was not flagged as a Tor exit node, known attacker, or ISP proxy. While the control plane indicated one DNSBL listing among eight total lists, the threat reputation module returned zero blacklist counts.
Data Contradictions and Confidence
Analysis revealed significant data contradictions, specifically between geolocation claims and RTT physics (claimed distance of 7,625 km versus an average RTT of 46ms). Overall confidence was rated Very Low (0.2083) due to these discrepancies and minimal signal persistence.
Recommendation
The appropriate action was determined to be Monitor. Severity was rated Low, primarily due to the presence of signal contradictions requiring observation for potential changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Comcast Cable Communications, Inc. |
| ASN | AS7922 |
| Network Name | COMCAST-E1-4 |
| CIDR Block | 68.86.64.0/18 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | be-304-cr22.nashville.tn.ibone.comcast.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | be-304-cr22.nashville.tn.ibone.comcast.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 43% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 13% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 24% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 16:32:37 UTC |
| Last Seen | 2026-09-17 08:09:25 UTC |
| Profile Built | 2026-09-17 08:23:13 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 30 |
Full dossier details are available via our API.