72.192.58.40
Intelligence analysis identified 72.192.58.40 as part of Cox Communications infrastructure (AS22773) within the 72.192.0.0/18 block. Ownership records localized the asset to Barrington, Rhode Island, United States. Technical scans confirmed the endpoint was firewalled with no open ports or active services. DNS resolution was verified with PTR records pointing to ip72-192-58-40.ri.ri.cox.net, and the associated domain cox.net maintained SPF and DMARC authentication.
Threat intelligence indicators showed no association with known campaigns, spam sources, or Tor exit nodes, with a risk score recorded at 20 (Low Risk). However, data consistency checks flagged a contradiction between the claimed geolocation and observed Round-Trip Time (RTT) physics. Overall confidence in the profile assessment was low (16.67%), with signal contradictions noted.
Neighborhood analysis indicated a clean classification with zero threat siblings within the /24 subnet. Behavioral monitoring reported no honeypot hits, WAF violations, or active attacker activity. Despite the low-risk categorization, the recommendation assigned was to monitor due to the presence of signal contradictions and insufficient data to fully classify intent.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cox Communications |
| ASN | AS22773 |
| Network Name | NETBLK-RI-RDC-72-192-0-0 |
| CIDR Block | 72.192.0.0/18 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | ip72-192-58-40.ri.ri.cox.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ip72-192-58-40.ri.ri.cox.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-10 20:39:37 UTC |
| Last Seen | 2026-09-10 20:39:37 UTC |
| Profile Built | 2026-09-10 20:57:12 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.