72.52.92.70
Intelligence Briefing: 72.52.92.70
Subject: 72.52.92.70/32
Status: Live
Risk Level: Low (Score: 25)
Ownership and Infrastructure
The address was assigned to Hurricane Electric LLC (AS6939) under the CIDR block 72.52.64.0/18. Registration occurred via ARIN. Network role classification indicated the host was firewalled with no open ports or active services. DNS reverse lookup resolved to `port-channel2.core3.fra2.he.net`. DNS hygiene was rated good, with SPF and DMARC records present.
Threat Assessment
Threat indicators, known campaigns, and blacklist listings were absent. The host was not identified as a Tor exit, proxy, or known spam source. Neighborhood analysis for the 72.52.92.0/24 subnet classified the block as mostly clean with low abuse density, though one threat sibling was detected.
Observations and Contradictions
Geolocation validation flagged a contradiction where claimed Boston coordinates contradicted RTT physics measurements. The observed RTT (93ms) was significantly lower than the minimum possible RTT (152.5ms) required for the reported 7625km distance. Routing data showed insufficient BGP/RPKI stability, with route changes recorded within the last 30 days.
Recommendation
The analysis recommended monitoring the address at low severity due to signal contradictions regarding geolocation and routing stability. No specific firewall rules were mandated at this time. Observations were recorded between 2026-09-04 and 2026-09-15.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Hurricane Electric LLC |
| ASN | AS6939 |
| Network Name | HURRICANE-8 |
| CIDR Block | 72.52.64.0/18 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | port-channel2.core3.fra2.he.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | port-channel2.core3.fra2.he.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 43% | 2 | 5 |
| routing | 19% | 1 | 2 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 26% | 10 | 17 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-04 00:15:38 UTC |
| Last Seen | 2026-09-15 11:42:22 UTC |
| Profile Built | 2026-09-15 11:53:08 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 30 |
Full dossier details are available via our API.