Intelligence analysis identified IP address 115.96.216.13 as a residential endpoint attributed to HATHWAY CABLE AND DATACOM LIMITED (ASN 17488) in Mumbai, Maharashtra, India. The asset maintained a Low Risk reputation with a risk score of 30. Network scanning detected no open ports or TLS certificates. Threat intelligence checks returned zero blacklist hits, with no flags for known attacker activity or spam sources. DNS records resolved to 216.96.115.13.hathway.com with valid SPF and DMARC authentication. BGP control plane monitoring observed route instability over the preceding 30 days. No specific mitigation actions were recommended based on the current evidence profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | HATHWAY CABLE AND DATACOM LIMITED |
| ASN | AS17488 |
| Network Name | HATHWAY-NET |
| CIDR Block | 115.96.0.0/14 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 216.96.115.13.hathway.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 216.96.115.13.hathway.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 3/3 domains |
| DMARC | 3/3 domains |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 3 domains |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS17488 |
| Network Prefix | 115.96.216.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 20% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 20% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 21% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:20:38 UTC |
| Last Seen | 2026-08-28 10:01:19 UTC |
| Profile Built | 2026-08-29 10:09:24 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 115.96.216.13
Who owns the IP address 115.96.216.13?
115.96.216.13 is registered to HATHWAY CABLE AND DATACOM LIMITED. The address falls within the 115.96.0.0/14 network block. Registration is held at APNIC.
Where is 115.96.216.13 located?
Geolocation data places 115.96.216.13 in Mumbai, Maharashtra, India. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 115.96.216.13 malicious or safe?
115.96.216.13 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 115.96.216.13?
The reverse DNS (PTR) record for 115.96.216.13 is 216.96.115.13.hathway.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.
Is 115.96.216.13 a VPN, proxy, or data center address?
115.96.216.13 is classified as a residential network based on network ownership and behavioural analysis.