IPDebrief

50.202.95.146

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Intelligence Briefing: IP 50.202.95.146/32

Asset Overview

IP 50.202.95.146 is assigned to Comcast Cable Communications, LLC (ASN 36040) and is classified as a residential endpoint. The address was observed in the network environment from September 11 to September 19, 2026, generating 29 total observations.

Technical Profile

The endpoint exposed HTTP and HTTPS services on ports 80 and 443. TLS analysis revealed a certificate subject matching `*.googlevideo.com` with a server banner indicating "gvs 1.0". DNS hygiene is rated fair, containing SPF and DMARC records but lacking DNSSEC or CAA validation.

Threat Assessment

The asset carries a risk score of 25 (Low Risk). While no specific attack campaigns or known attacker profiles were identified, the system flagged the host as "Suspicious" due to signal contradictions. Geolocation data claims West Palm Beach, FL, yet RTT measurements indicated a distance of 7,626 km with a 15ms round-trip time, violating physical network limits.

Recommendation

Analysis recommends monitoring the endpoint for behavioral changes. The discrepancy between claimed geolocation and measured network latency requires observation to determine if the address transitions to malicious activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionFL
CityWest Palm Beach
Timezoneβ€”
Latitude27.66
Longitude-81.52

🏒 Ownership & Registration

OrganizationComcast Cable Communications, LLC
ASNAS36040
Network NameCCCH3-4
CIDR Block50.128.0.0/9
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)

πŸ” DNS Hygiene

Hygiene Score40% (Fair)
SPF12/12 domains
DMARC12/12 domains
FCrDNSNot verified
DNSSECNot signed
CAANot configured
Domains Checked12 domains

☁️ Network Classification

InfrastructureResidential
Service PurposeWeb Server
Network TierEnd-User β€” Residential ISP endpoint
Residential

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
Servergvs 1.0
HTTP Titleβ€”
⚠ Unusual for residential β€” open services on a home connection may indicate self-hosting, compromise, or misconfigured networking equipment.

πŸ” TLS Certificate

πŸ”’
CN=*.googlevideo.com
Issued by CN=WR2, O=Google Trust Services, C=US
Self-signed: No
SANs*.googlevideo.com*.a1.googlevideo.com*.a1.googlevads-cn.com*.bdn.dev*.origin-test.bdn.dev*.c.doc-0-0-sj.sj.googleusercontent.com*.c.2mdn.net*.c.2mdn-cn.net*.dai.googlevideo.com*.dai.googlevads-cn.com
Valid From2026-08-25T12:31:58+00:00
Valid Until2026-11-03T12:31:57+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period69 days
Serial Number00C946E443C0D368180A3BDB61F1CE76A4
Thumbprint02134637859C7A03C76C8678A0470B7BC957E871

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
38%
25
routing
13%
11
services
27%
24
ownership
27%
23
reputation
22%
13
geolocation
38%
25
Overall27%1021
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-09-11 03:46:03 UTC
Last Seen2026-09-27 16:21:44 UTC
Profile Built2026-09-27 16:28:05 UTC
Data FreshnessLive
Signal Types20
Total Observations50
πŸ” 20 signal types Β· 50 observations collected
This report is generated from 20+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.