Intellectuall Briefing: 96.110.43.158/32
Classification: Residential Endpoint
Ownership: Comcast Cable Communications, LLC (AS7922)
Location: Atlanta, GA, US
Assessment:
The address was classified as a Low Risk endpoint with an overall risk score of 25. While no specific attack indicators or known campaigns were associated with the IP, the profile was tagged as a Suspicious Host. The endpoint was listed on one DNS blacklist out of eight total checks observed. Behavioral analysis indicated no active attacker status, with zero honeypot hits or enumeration strikes recorded during the observation window.
Technical Discrepancies:
Geolocation validation data revealed a contradiction between the claimed Atlanta, GA location and RTT physics measurements. The analysis showed a distance of approximately 7,626km with a measured Round-Trip Time of 53.0ms, falling below the minimum possible threshold for that distance.
Recommendation:
Analysts were advised to Monitor the address due to signal contradictions, despite the low-risk classification. No immediate firewall rules were required based on current data.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Comcast Cable Communications, LLC |
| ASN | AS7922 |
| Network Name | COMCAST-E1-16 |
| CIDR Block | 96.110.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | β |
π DNS Intelligence
| PTR | ae-794-ar03.venice.fl.westfl.comcast.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | ae-794-ar03.venice.fl.westfl.comcast.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User β Residential ISP endpoint |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 20% | 10 | 13 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-07 05:07:11 UTC |
| Last Seen | 2026-09-19 11:53:56 UTC |
| Profile Built | 2026-09-19 12:03:09 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 26 |
Full dossier details are available via our API.