72.204.189.223📋 Copy

# IP Intelligence Briefing: 72.204.189.223/32

## Executive Summary

The IP address 72.204.189.223 presents a low-risk profile with a risk score of 25. The address is assigned to Cox Communications (AS22773) and is classified as a residential endpoint located in New Orleans, Louisiana. No active threat indicators or malicious campaigns were identified during the analysis period.

## Ownership and Network Classification

• Organization: Cox Communications, Inc.
• ASN: 22773
• Network Block: 72.204.128.0/18
• Geolocation: United States, Louisiana, New Orleans
• Classification: Residential
• Network Role: Firewalled / No Services
• RIR: ARIN

## Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Threat Indicators: None identified
• Blacklist Status: Not listed (0/0)
• DNSBL Listed: 1 of 8 lists
• Known Attacker: No
• Tor Exit Node: No
• Proxy/VPN Service: No

## Threat Intelligence Observations

The IP has generated 22 historical observations across the monitoring period. Key findings include:

• Observation Count: 22 signals recorded
• Recent Activity: Most recent observations recorded on 2026-06-25
• Threat Persistence: Single threat observation noted on 2026-06-05
• Persistent Malicious Activity: No
• Ownership Stability: No ownership changes detected

The observation history indicates a stable residential endpoint with minimal threat exposure.

## Neighborhood Analysis

• Subnet: 72.204.189.0/24
• Abuse Density: 0
• Neighbor Classification: Clean
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 0

The surrounding /24 subnet shows no abuse activity, reinforcing the low-risk classification of this address.

## Relationship Graph

The IP maintains 28 relationships, predominantly DNS associations and network block references. All relationships point to:

• Hostname: ip72-204-189-223.no.no.cox.net
• Network Block: NETBLK-NO-RDC-72-204-128-0

No external organizations, hostnames, or certificate associations were identified outside of Cox Communications infrastructure.

## DNS and Service Profile

• PTR Record: ip72-204-189-223.no.no.cox.net
• Forward Resolution: Confirmed
• Open Ports: None
• TLS Certificates: None
• HTTP Services: None detected
• Email Auth: SPF and DMARC records present

## Recommended Actions

Based on the low-risk profile, no immediate blocking or mitigation actions are recommended. The IP should be permitted through standard firewall rules with normal monitoring. The residential nature and clean neighborhood classification suggest this is a legitimate consumer endpoint.

## Analyst Notes

This IP address represents a standard residential connection from Cox Communications with no indicators of compromise. The single DNSBL listing appears to be a false positive or non-malicious listing. No correlation to known campaigns or attack infrastructure was identified. Continued monitoring is appropriate but no immediate action is warranted.

---

Classification: Intelligence Summary

Generated: 2026-06-25

Risk Level: Low

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.