70.160.213.113📋 Copy

# IP Intelligence Briefing: 70.160.213.113/32

Classification: LOW RISK

Risk Score: 25/100

Date: 2026-06-26

Prepared for: SOC Analyst Team

## Executive Summary

IP address 70.160.213.113 belongs to Cox Communications infrastructure and is classified as low-risk with no active threat indicators. The IP is firewalled with no open services, resides in residential infrastructure, and operates within a clean subnet. Recommended action: NO IMMEDIATE ACTION REQUIRED.

---

## Infrastructure Profile

Ownership & Classification

• Organization: Cox Communications (ASN: 22773)
• Network Block: NETBLK-HR-RDC-70-160-0-0 / 70.160.0.0/15
• Registry: ARIN
• Network Role: Firewalled / No Services
• Infrastructure Type: Residential

Geolocation

• Country: United States (US)
• Region: Virginia (VA)
• City: Norfolk
• RTT Validation: Geographic inconsistency detected (38ms observed vs. 127.9ms minimum for 6,396km distance)

DNS Analysis

• PTR Hostname: ip70-160-213-113.hr.hr.cox.net
• Forward Resolution: Confirmed
• Domain: cox.net
• Email Authentication: SPF and DMARC records present

---

## Threat Assessment

Current Threat Indicators

• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• VPN/Proxy: False
• Campaign Association: None identified
• Threat Feeds: No matches

Risk Breakdown

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Abuse Confidence: Not applicable (no threat signals)

---

## Neighborhood Analysis

Subnet: 70.160.213.113/24

Abuse Density: 0%

Classification: Clean

Active Neighbors: 0

Threat Siblings: 0

The immediate /24 subnet shows no abuse activity, with all sibling IPs classified as clean.

---

## Historical Observations (22 Total Signals)

Recent Activity (June 2026)

• 2026-06-26: Multiple observations indicate residential infrastructure classification with "Basic" operator score (0.2609)
• 2026-06-06: Mixed observations showing residential and non-residential classifications
• Geographic Consensus: Inconsistent across observations (plausible: false)

Temporal Stability

• Ownership Changes: 0
• Threat Persistence Days: 0
• Observation Count: 0
• Is Persistently Malicious: False

---

## Network Relationships

• DNS Associations: 23 entries (ip70-160-213-113.hr.hr.cox.net)
• Network Associations: NETBLK-HR-RDC-70-160-0-0
• External Entities: None (no organizations, certificates, or external IP relationships)

---

## Control Plane Data

• Origin ASN: 22773
• BGP Prefix: 70.160.0.0/15
• Route Stability: Stable (no route changes in 30 days)
• RPKI State: Unknown
• IRR Consistency: Unknown
• DNSSEC: Valid
• Route Changes (30d): 0

---

## Recommended Actions

Firewall/Network Rules

• No blocking required – IP classified as low-risk with no threat indicators
• Standard residential filtering applies if organization policy restricts residential IP ranges

Monitoring Recommendations

• No enhanced monitoring necessary
• Routine logging sufficient for compliance

Additional Context

The IP address is associated with Cox Communications residential infrastructure. The geographic RTT anomaly (38ms vs. 127.9ms minimum for Norfolk, VA) may indicate probe measurement error or misreported geolocation data. No actionable threat intelligence suggests this IP is not involved in malicious activity.

---

Intelligence Level: Complete

Data Confidence: Medium (geo inconsistency noted)

Threat Level: Low (Risk Score: 25)

Action Required: None

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.