Intelligence Briefing: 96.110.42.74/32
Overview
The IP address 96.110.42.74 was classified as a low-risk residential endpoint with a risk score of 20. The asset was assigned to Comcast Cable Communications, LLC (ASN 7922) within the 96.110.0.0/16 block. Network role analysis identified the address as a standard residential internet connection with no infrastructure characteristics associated with cloud, CDN, or hosting providers.
Threat Assessment
No active threat indicators were detected. The IP was not listed on any blacklists, was not associated with known malicious campaigns, and showed no correlation with threat actors. Behavioral analysis recorded zero WAF violations, enumeration strikes, or honeypot hits. The neighborhood surrounding the subnet was classified as clean with zero threat siblings.
Technical Anomalies
A geolocation validation contradiction was recorded. While the asset was geolocated to New York, the observed Round-Trip Time (RTT) of 22ms conflicted with the minimum possible latency of 152.5ms required for that distance. DNS resolution confirmed the Comcast domain with valid SPF and DMARC records, but DNSSEC and CAA records were absent.
Recommendation
Due to the geolocation physics contradiction, the asset was recommended for monitoring with a low severity rating. No firewall rules were automatically triggered. The profile remains live with observations recorded through September 6, 2026.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Comcast Cable Communications, LLC |
| ASN | AS7922 |
| Network Name | COMCAST-E1-16 |
| CIDR Block | 96.110.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | β |
π DNS Intelligence
| PTR | be-31431-arsc1.metrodr.md.bad.comcast.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | be-31431-arsc1.metrodr.md.bad.comcast.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User β Residential ISP endpoint |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 4 |
| Overall | 20% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-30 08:02:06 UTC |
| Last Seen | 2026-09-21 16:36:09 UTC |
| Profile Built | 2026-09-21 16:45:35 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 35 |
Full dossier details are available via our API.