72.27.53.235
# IP Intelligence Briefing: 72.27.53.235/32
Classification: Moderate Risk | Risk Score: 40/100
Date: July 25, 2026 | Data Source: IPDebrief Intelligence Platform
## Executive Summary
IP address 72.27.53.235 presents a moderate risk profile (score: 40) with no active threat indicators. The address is assigned to Cable and Wireless Jamaica (organization) but operates under Comcast infrastructure (ASN 30689). The IP is currently firewalled with no open services and exhibits minimal malicious activity. No immediate blocking recommended; continue monitoring.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **Geolocation** | US (New York), US-NY |
| **ASN** | 30689 (Comcast) |
| **Organization** | Cable and Wireless Jamaica |
| **CIDR Block** | 72.27.53.0/24 |
| **DNS Resolution** | 235-53-27-72-br1-DYNAMIC-dsl.cwjamaica.com |
| **PTR Record** | 235-53-27-72-br1-DYNAMIC-dsl.cwjamaica.com |
| **Control Plane** | Route unstable, 2/8 DNSBL listings |
---
## Threat Assessment
Current Risk Indicators:
- No known attacker attribution
- No spam source designation
- No Tor exit node
- 0 blacklist entries (abuse confidence score: null)
- No active threat campaigns
Risk Factors:
- 2 DNSBL listings among 8 total lists
- Route instability detected (isRouteStable: false)
- Operator score: 0.1304 (Minimal)
Services: No open ports detected; service purpose: Firewalled / No Services
---
## Network Neighborhood Analysis
Subnet: 72.27.53.0/24
Abuse Density: 0
Total Siblings: 1
Risk Distribution: 1 low-risk, 0 medium, 0 high
Notable Neighbor: 72.27.53.30 (risk score: 0, authority score: 50)
The subnet exhibits clean operational characteristics with no concentrated abuse activity.
---
## Historical Observations (Last 14 Signals)
Recent activity shows consistent organizational attribution to Cable and Wireless Jamaica with ARIN RIR registration. Geolocation data indicates Jamaica (Kingston) with conflicting Colombia mappings in some observations. No escalation in risk posture observed over time.
Temporal Indicators:
- Ownership changes: 0
- Threat persistence days: 0
- Not persistently malicious: false
---
## Relationships
DNS Association: 235-53-27-72-br1-DYNAMIC-dsl.cwjamaica.com
Total Relationships: 1
No additional organizational, subnet, or certificate relationships identified.
---
## Recommended Actions
Based on current risk profile, the following actions are recommended:
1. Monitoring: Continue passive monitoring; no immediate blocking required
2. Traffic Analysis: Investigate any unsolicited connections from this IP
3. Subnet Review: Monitor 72.27.53.0/24 for any emerging abuse patterns
Firewall Rules: No specific firewall rules recommended at this time due to low active threat profile.
---
Analyst Notes: This IP represents a residential/dynamic assignment with moderate risk scoring primarily driven by DNSBL listings rather than active malicious behavior. The subnet environment appears benign. Maintain awareness of the geographic discrepancies in geolocation data (US vs. Jamaica/Colombia) which may indicate routing inconsistencies or data source conflicts.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cable and Wireless Jamaica |
| ASN | AS30689 |
| Network Name | CWJ-16BLK |
| CIDR Block | 72.27.0.0/17 |
| RIR | ARIN |
| Country | Colombia |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 235-53-27-72-br1-DYNAMIC-dsl.cwjamaica.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 235-53-27-72-br1-DYNAMIC-dsl.cwjamaica.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS30689 |
| Network Prefix | 72.27.53.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 8% | 1 | 1 |
| Overall | 13% | 8 | 11 |
| Data Coherence | Mixed Signals (60%) — 2 contradiction(s) |
| Attribution | Very Low (20%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: JM, US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 19:41:22 UTC |
| Last Seen | 2026-09-11 10:00:43 UTC |
| Profile Built | 2026-09-11 10:35:49 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 30 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 72.27.53.235
Who owns the IP address 72.27.53.235?
72.27.53.235 is registered to Cable and Wireless Jamaica. The address falls within the 72.27.0.0/17 network block. Registration is held at ARIN.
Where is 72.27.53.235 located?
Geolocation data places 72.27.53.235 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 72.27.53.235 malicious or safe?
72.27.53.235 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 72.27.53.235?
The reverse DNS (PTR) record for 72.27.53.235 is 235-53-27-72-br1-DYNAMIC-dsl.cwjamaica.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.
Is 72.27.53.235 a VPN, proxy, or data center address?
72.27.53.235 is classified as a mobile network based on network ownership and behavioural analysis.