75.80.65.214📋 Copy

# IP Intelligence Briefing: 75.80.65.214/32

## Executive Summary

IP 75.80.65.214 presents as a High Risk residential endpoint associated with Charter Communications/Comcast. The IP carries an elevated risk score of 80 with multiple DNSBL listings (5 of 8 lists), though neighborhood analysis indicates minimal subnet-wide abuse activity.

## Threat Profile

• Risk Score: 80 (High Risk)
• Classification: Residential Endpoint
• Provider: Charter Communications Inc (ASN 20001)
• Geolocation: Hawaii, US (Kahului area)
• DNS: syn-075-080-065-214.biz.spectrum.com

## Key Indicators

• DNSBL Status: Listed on 5 of 8 monitored blacklists
• Network Role: Residential (not cloud, CDN, proxy, or hosting infrastructure)
• Control Plane: Route stability flagged as false; DNSSEC valid
• Geolocation Validation: RTT anomaly detected (141ms measured vs 234ms minimum expected for Hawaii distance)

## Historical Observations

Analysis of 21 observation records reveals:

• Recent observations from June 2026
• Classification consistently identifies as residential infrastructure
• Risk signals range from "Minimal" to "Basic" severity
• No persistent malicious behavior detected
• Ownership and configuration changes: 0

## Network Relationships

• 48 total relationship records identified
• Multiple same-network associations (RRWE)
• DNS association to spectrum.com domain infrastructure
• No certificate matches or correlated IP campaigns identified

## Subnet Analysis (75.80.65.0/24)

• Abuse Density: 0 (minimal)
• Risk Classification: mostly_clean
• Inherited Risk: 2
• Active Threat Siblings: 1
• Total Siblings: 1

## SOC Recommendations

1. Block/Restrict: Consider blocking this IP at perimeter due to High Risk classification and multiple blacklist listings

2. Monitor: Track for outbound connections; residential IPs often indicate compromised endpoints

3. Context: Evaluate against known threat intelligence feeds if available

4. Geolocation Review: Investigate RTT anomaly—potential misconfiguration or proxy usage

5. Action Priority: Medium-High (risk score 80 warrants attention despite clean neighborhood)

## Notes

While the immediate subnet shows minimal abuse density, the individual IP's risk profile and DNSBL presence suggest it has been flagged for suspicious activity. Treat as potentially compromised residential endpoint requiring monitoring or blocking depending on threat context.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.