69.194.242.12
The IP address 69.194.242.12 was associated with RhythmOne, LLC (ASN 26120) under the registration block 69.194.240.0/20. Passive reconnaissance identified the host as a Web Server with active TCP connections on ports 80 and 443. An HTTPS certificate was observed, issued by Sectigo Limited for the *.turn.com domain.
Threat feeds recorded no blacklist hits, abuse reports, or known campaign correlations. The IP maintained a Low Risk reputation score of 20. The /24 subnet neighborhood was classified as clean with zero active threat siblings. Behavioral logs indicated no honeypot hits, enumeration strikes, or WAF violations.
Data inconsistencies were recorded during validation. Geolocation data suggested the United States, while RTT measurements indicated a distance of 7625.7km, violating physics-based minimum RTT thresholds. DNS hygiene was rated Poor due to missing DMARC and CAA records. Consequently, the recommendation was Monitor with low severity, noting insufficient intent classification and signal contradictions. Ownership remained stable with no changes detected.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | RhythmOne, LLC |
| ASN | AS26120 |
| Network Name | NET-69-194-240-0-1 |
| CIDR Block | 69.194.240.0/20 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 2/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.turn.comturn.com |
| Valid From | 2026-03-03T00:00:00+00:00 |
| Valid Until | 2027-04-03T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 00D1B1011BA3022B6ACFBE386712CD5C98 |
| Thumbprint | CB5797E00E0F91A5310955EDC28C9FACB0214E11 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 33% | 2 | 4 |
| Overall | 27% | 10 | 19 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 22:33:18 UTC |
| Last Seen | 2026-09-26 01:13:52 UTC |
| Profile Built | 2026-09-26 01:21:03 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 33 |
Full dossier details are available via our API.