76.49.199.97
IP Intelligence Briefing: 76.49.199.97
Date: 2026-06-07
---
**1. Risk Assessment**
- Risk Score: 80 (High Risk)
- Threat Indicators: No direct malicious activity detected (no indicators, campaigns, or blacklist entries).
- Network Classification: Residential endpoint (Charter Communications Inc).
- Geolocation:
- Claimed: Aberdeen, NC, USA (35.13°N, -79.43°E).
- Validation: Geo-plausibility failed (RTT discrepancy: 45ms vs. expected 134.8ms for 6741km).
---
**2. Ownership & Infrastructure**
- ISP: Charter Communications Inc (ASN 11426).
- Network Role: Residential endpoint.
- Subnet: 76.49.199.97/24 (abuse density: 0, classified as "clean").
- DNS:
- PTR hostname: `syn-076-049-199-097.res.spectrum.com`.
- SPF/DKIM: Validated (SPF: true, DMARC: true).
---
**3. Observation History**
- Recent Activity (Last 30 Days):
- RTT Anomalies: Multiple observations show spoofed geolocation (RTT 45ms vs. expected 134.8ms for distance).
- DNSBL Listings: 6/8 DNSBL lists flagged (e.g., Spamhaus, OpenDNS).
- Network Stability: BGP route stability: "not stable" (route changes: 0).
---
**4. Relationships & Connections**
- Linked Entities:
- Network: RR PRI (repeated in relationships).
- DNS: Resolves to `syn-076-049-199-097.res.spectrum.com` (local resolver?).
- No Active Neighbors: Subnet 76.49.199.97/24 has 0 active IPs (unusual for residential networks).
---
**5. Neighborhood Analysis**
- Subnet: 76.49.199.97/24.
- Abuse Density: 0 (clean).
- Neighbors: No active or threatening IPs detected.
---
**6. Recommendations**
- Monitor DNS Activity: Investigate DNSBL listings (e.g., Spamhaus) for potential spoofing or abuse.
- Geolocation Verification: Confirm if the IP is spoofed (RTT discrepancy suggests possible false geolocation).
- Network Segmentation: Isolate residential IPs in DMZs or restrict access to critical systems.
- DNS Security: Ensure SPF/DKIM alignment and monitor for DNS tampering.
Note: The IP’s high risk score may stem from DNSBL flags or spoofed geolocation. Further investigation is needed to confirm malicious intent.
---
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Charter Communications Inc |
| ASN | AS11426 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | syn-076-049-199-097.res.spectrum.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | syn-076-049-199-097.res.spectrum.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Multi-Service Host |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Apache |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_8.4 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 34% | 2 | 3 |
| routing | 23% | 1 | 1 |
| services | 18% | 1 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 24% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 24% | 9 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-15 20:48:29 UTC |
| Last Seen | 2026-06-26 18:11:34 UTC |
| Profile Built | 2026-06-26 18:11:52 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.