69.30.249.202
Intelligence Briefing: 69.30.249.202
Assessment
The IP address 69.30.249.202 was assessed as Low Risk with a reputation score of 25. The system classified the host as a Suspicious Host with low attribution confidence (35%). No active attacks or known campaign associations were observed during the review period.
Technical Profile
Ownership traces to AS32097 (WholeSale Internet, Inc.) within the 69.30.192.0/18 block. Network analysis revealed a single open port (22/TCP) running OpenSSH 8.7. No HTTP, TLS, or reverse DNS records were detected. The network role was identified as a Single-Service Host.
Threat Intelligence
Threat indicators showed no matches for known campaigns or blacklists. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. However, a contradiction existed between claimed geolocation and RTT physics measurements, flagging the geo-location as implausible.
Operational Recommendation
Analysts were advised to monitor the address due to signal contradictions present in the data. No immediate firewall rules were required. The profile data remains live as of the most recent observation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | WholeSale Internet, Inc. |
| ASN | AS32097 |
| Network Name | WII-NET-69-30 |
| CIDR Block | 69.30.192.0/18 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_8.7 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 33% | 2 | 6 |
| Overall | 23% | 10 | 20 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 09:36:07 UTC |
| Last Seen | 2026-09-23 12:45:58 UTC |
| Profile Built | 2026-09-23 12:56:43 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 33 |
Full dossier details are available via our API.