170.249.185.196
Intelligence Briefing: IP 170.249.185.196/32
The IP address 170.249.185.196 was assessed as Low Risk with a risk score of 20. Ownership records attributed the address to Uniti Fiber Holdings Inc. (ASN 13760) within the 170.249.128.0/18 block. Network scanning indicated the host was firewalled with no open ports or active services, and DNS resolution returned a private internal hostname associated with the organization's NOC.
Threat intelligence analysis found no active attacker indicators, blacklist hits, or known campaign associations. Behavioral logs showed zero incidents, honeypot hits, or enumeration strikes, and the immediate subnet was classified as clean with low abuse density. However, geolocation validation flagged a contradiction where the claimed location in Mobile, Alabama, conflicted with Round-Trip Time physics measurements, suggesting the reported distance did not match observed latency.
Due to the presence of signal contradictions despite a clean threat profile, the address was marked for monitoring with low severity. No immediate blocking actions were recommended based on current observations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Uniti Fiber Holdings Inc. |
| ASN | AS13760 |
| Network Name | SL-18-IPV4-2 |
| CIDR Block | 170.249.128.0/18 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 400g-fh0-0-0-2.CAKE.noc.unitifiber.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 400g-fh0-0-0-2.CAKE.noc.unitifiber.com |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 7 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 33% | 2 | 6 |
| reputation | 27% | 1 | 5 |
| geolocation | 33% | 2 | 5 |
| Overall | 27% | 10 | 26 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 07:32:44 UTC |
| Last Seen | 2026-09-27 04:59:09 UTC |
| Profile Built | 2026-09-27 05:10:54 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 41 |
Full dossier details are available via our API.