72.27.166.206
# IP Intelligence Briefing: 72.27.166.206
## Overview
On 2026-07-25, intelligence operations identified IP 72.27.166.206 as a moderate-risk endpoint (Risk Score: 40) operated by Cable and Wireless Jamaica (AS30689). The address registered to the CWJ-16BLK network block within the 72.27.0.0/17 CIDR range, with geolocation pointing to Kingston, Jamaica.
## Network Classification
The IP resolved as a mobile carrier endpoint utilizing DSL infrastructure. Network role analysis classified the address as non-cloud, non-CDN, non-VPN, and non-hosting. Service scans returned no open ports, indicating the endpoint was firewalled with no publicly accessible services. The PTR hostname registered as "206-166-27-72-br1-DYNAMIC-dsl.cwjamaica.com," confirming residential/cellular mobile carrier usage patterns.
## Threat Indicators
Threat intelligence feeds returned no active indicators. The address maintained zero blacklist entries across commercial reputation sources. However, control plane analysis revealed the IP was listed on 2 of 8 DNSBLs, indicating prior reputation issues. Historical observations showed intermittent threat flagging events, though no campaigns correlated with this specific address. The endpoint demonstrated no persistent malicious behavior patterns.
## Geolocation and Ownership
Ownership records consistently identified Cable and Wireless Jamaica under AS30689 in the ARIN registry. Geolocation data converged across multiple sources on Kingston, Jamaica (coordinates: 18.0028, -76.7897). Some historical observations showed conflicting country attribution to Colombia, but the consensus remained Jamaica. The IP maintained ownership stability with zero changes recorded during the observation window.
## Network Neighborhood
Analysis of the 72.27.166.0/24 subnet revealed no sibling IPs. Abuse density metrics returned zero, with no high, medium, or risk-sibling neighbors detected. The subnet inherited no risk from adjacent addresses, isolating this endpoint from broader neighborhood threat activity.
## Relationship Graph
The relationship graph identified three associations: one same-network link to CWJ-16BLK and two DNS hostname associations. No organization, certificate, or correlated IP relationships emerged from graph traversal.
## SOC Recommendations
The IP presents moderate risk due to DNSBL listings and historical threat flags despite current clean threat indicators. Recommended actions include:
1. Monitor for service activation on previously closed ports
2. Review firewall rules for the mobile carrier DSL connection type
3. Evaluate DNSBL listing sources for potential false positives
4. Add to watchlist for periodic reputation monitoring
The endpoint's residential mobile carrier nature suggests limited direct threat value, but the DNSBL history warrants continued observation.
Classification: Moderate Risk - Network Infrastructure
Last Updated: 2026-07-25
Data Sources: 15 historical observations, 1 current profile
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cable and Wireless Jamaica |
| ASN | AS30689 |
| Network Name | CWJ-16BLK |
| CIDR Block | 72.27.0.0/17 |
| RIR | ARIN |
| Country | Colombia |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 206-166-27-72-br1-DYNAMIC-dsl.cwjamaica.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 206-166-27-72-br1-DYNAMIC-dsl.cwjamaica.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS30689 |
| Network Prefix | 72.27.164.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 19:41:22 UTC |
| Last Seen | 2026-08-27 05:07:57 UTC |
| Profile Built | 2026-08-29 05:50:04 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 72.27.166.206
Who owns the IP address 72.27.166.206?
72.27.166.206 is registered to Cable and Wireless Jamaica. The address falls within the 72.27.0.0/17 network block. Registration is held at ARIN.
Where is 72.27.166.206 located?
Geolocation data places 72.27.166.206 in Kingston, Kingston, JM. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 72.27.166.206 malicious or safe?
72.27.166.206 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 72.27.166.206?
The reverse DNS (PTR) record for 72.27.166.206 is 206-166-27-72-br1-DYNAMIC-dsl.cwjamaica.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.
Is 72.27.166.206 a VPN, proxy, or data center address?
72.27.166.206 is classified as a mobile network based on network ownership and behavioural analysis.