65.189.140.167
Intelligence briefing for IP 65.189.140.167/32.
The IP address is registered to Charter Communications Inc (ASN 10796) as a residential endpoint in Beavercreek, Ohio. Risk assessment placed the address at Low Risk with a score of 25. No active threat indicators, known campaigns, or blacklist associations were observed. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations, and the address was not flagged as a known attacker, spam source, or Tor exit node. Technical probing revealed no open ports or active web services.
Data validation flagged a contradiction between the claimed geolocation distance (6662km) and the RTT measurement (44ms), along with route stability inconsistencies. Control plane analysis noted one DNSBL listing among eight total checks. The surrounding /24 neighborhood subnet is classified as clean with zero active threat siblings. Domain resolution confirmed valid SPF and DMARC records for the associated charter.com domain.
Given the presence of signal contradictions and a data confidence label of Very Low, the recommended action is Monitor with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Charter Communications Inc |
| ASN | AS10796 |
| Network Name | RR |
| CIDR Block | 65.184.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | lag-1.mcr11lsvqkydb.netops.charter.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | lag-1.mcr11lsvqkydb.netops.charter.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 27% | 2 | 3 |
| Overall | 25% | 10 | 21 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 13:27:00 UTC |
| Last Seen | 2026-09-17 17:29:33 UTC |
| Profile Built | 2026-09-17 17:39:30 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 33 |
Full dossier details are available via our API.