50.151.217.23
The IP address 50.151.217.23 was owned by Comcast Cable Communications, LLC (ASN 36040) and identified as a residential endpoint. Ports 80 and 443 were open, with HTTPS traffic utilizing a certificate issued by Google Trust Services for *.googlevideo.com. The server banner reported "gvs 1.0".
Risk assessment indicated a Low Risk reputation score of 25. No known campaigns or active attacker indicators were observed. However, a contradiction existed between the claimed geolocation and RTT physics measurements, recording an implausible 7,626km distance with a 17.2ms average round-trip time. The address appeared on one of eight scanned DNS blacklists.
The surrounding subnet was classified as mostly clean with three threat siblings. Due to signal contradictions and a Very Low confidence score, the intelligence profile recommended monitoring the endpoint with Low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Comcast Cable Communications, LLC |
| ASN | AS36040 |
| Network Name | CCCH3-4 |
| CIDR Block | 50.128.0.0/9 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Web Server |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | gvs 1.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.googlevideo.com*.a1.googlevideo.com*.a1.googlevads-cn.com*.bdn.dev*.origin-test.bdn.dev*.c.doc-0-0-sj.sj.googleusercontent.com*.c.2mdn.net*.c.2mdn-cn.net*.dai.googlevideo.com*.dai.googlevads-cn.com |
| Valid From | 2026-08-25T12:31:58+00:00 |
| Valid Until | 2026-11-03T12:31:57+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 69 days |
| Serial Number | 084E824A2845148312CB3C37A232E6C0 |
| Thumbprint | D28C16474D6045AA435DAF3112D33871978604F5 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 2 |
| routing | 20% | 1 | 1 |
| services | 40% | 2 | 3 |
| ownership | 40% | 2 | 3 |
| reputation | 20% | 1 | 1 |
| geolocation | 43% | 2 | 3 |
| Overall | 31% | 10 | 13 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-14 00:26:05 UTC |
| Last Seen | 2026-09-15 02:08:42 UTC |
| Profile Built | 2026-09-15 02:28:47 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.