93.96.188.226📋 Copy

THREAT INTELLIGENCE BRIEFING

IP Address: 93.96.188.226

Classification: Moderate Risk – Residential Broadband

Date: Current Analysis

Source: IPDebrief Intelligence Platform

---

EXECUTIVE SUMMARY

IP 93.96.188.226 is a residential broadband endpoint assigned to Sky UK Broadband (ASN 5607). The IP presents moderate risk (score 50) with no active threat indicators. Traffic patterns and infrastructure characteristics indicate legitimate consumer-grade broadband usage rather than malicious activity.

---

OWNERSHIP & INFRASTRUCTURE

---

THREAT ASSESSMENT

Risk Score: 50 (Moderate)

• Abuse Confidence: Not reported
• Blacklist Status: 2 DNSBL listings detected (of 8 total)
• Known Threats: None identified
• Campaign Correlation: No matching campaigns or certificate matches

Threat Indicators:

• Not a Tor exit node, VPN, proxy, or hosting infrastructure
• No active attack patterns observed
• No spam source classification
• No known malicious campaigns

---

NETWORK BEHAVIOR

Services & Ports:

• Open: TCP/443 (HTTPS)
• HTTP Status: 200 OK
• HTTP Version: 1.1
• TLS Certificate: UK-issued (not self-signed)
• Server Response Time: 719ms

DNS Configuration:

• No PTR hostnames
• Forward resolution: Not confirmed
• No SPF or DMARC records configured
• Domain: Not resolved

Control Plane:

• Route stability: False (route changes detected)
• DNSSEC: Valid
• Operator score: 0.1304 (Minimal)
• DNSBL listings: 2 of 8 total lists

---

OBSERVATION HISTORY

Total observations: 16

Recent Activity (2026-07-30):

• Geolocation signals consistently indicate GB/England with 500km accuracy radius
• Residential infrastructure classification confirmed across multiple probes
• HTTP service signals show standard residential broadband behavior
• ASN and RIR data consistently report Sky UK Broadband (AS5607)

Temporal Analysis:

• No persistent malicious activity detected
• Ownership stability: No changes
• Threat observation count: 0
• Classification: Not persistently malicious

---

NEIGHBORHOOD ANALYSIS

Subnet: 93.96.188.226/24

• Abuse Density: 0%
• Classification: Clean
• Active Threat Siblings: 0
• Total Siblings: 1 (inactive)
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0

The immediate subnet shows no associated threat indicators, suggesting isolated residential usage rather than coordinated malicious activity.

---

RELATIONSHIP GRAPH

Detected Relationships: 3

• All relationships map to the same network: BSKYB-BROADBAND
• No external organization, hostname, or certificate associations
• Network-only relationships confirm standard ISP infrastructure

---

RECOMMENDED ACTIONS

Firewall/Security Recommendations:

• No specific blocking or rate-limiting required based on current risk profile
• Standard residential broadband filtering policies apply
• Monitor for unusual traffic patterns given 2 DNSBL listings

Monitoring Guidelines:

• Track outbound connection patterns
• Watch for policy violations if used for web proxying
• Consider geographic filtering if organization restricts UK traffic

Threat Level: LOW-MODERATE

Action Required: Routine monitoring only

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.