65.25.137.132
Subject: Intelligence Briefing: 65.25.137.132/32
Summary
Analysis indicated IP 65.25.137.132 operated as a low-risk residential endpoint with an assigned risk score of 20.
Network and Ownership
Ownership records associated the address with Charter Communications Inc (ASN 10796) within the ROADRUNNER-CENTRAL network block (65.24.0.0/13). DNS forward resolution confirmed the address to a Charter infrastructure hostname.
Threat Assessment
Threat intelligence feeds returned no matches for known campaigns, blacklists, or known attackers. Abuse confidence scores were unassigned. Neighborhood analysis of the 65.25.137.0/24 subnet classified the environment as clean with zero active threat siblings.
Technical Observations
DNS hygiene scores were rated good with SPF and DMARC enabled. Operational validation noted a contradiction between claimed geolocation and RTT physics measurements. Overall data confidence remained very low due to data sufficiency constraints.
Recommendation
Analysts recommended monitoring the address with low severity. No immediate firewall rules were generated based on the residential endpoint classification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Charter Communications Inc |
| ASN | AS10796 |
| Network Name | ROADRUNNER-CENTRAL |
| CIDR Block | 65.24.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | lag-10.rcr01clmkohpe.netops.charter.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | lag-10.rcr01clmkohpe.netops.charter.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-10 01:04:04 UTC |
| Last Seen | 2026-09-20 06:13:20 UTC |
| Profile Built | 2026-09-23 01:36:29 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 32 |
Full dossier details are available via our API.