96.216.135.186
Subject: Intelligence Briefing for IP 96.216.135.186/32
Overview
The target address 96.216.135.186 is registered to Comcast Cable Communications, LLC (ASN 7922) within the United States. Geolocation data places the endpoint in the Michigan region, identified via PTR record as lg-2-soag06.sannarbor.mi.michigan.comcast.net. Network classification designates the IP as a residential endpoint within a clean neighborhood classification.
Risk Assessment
Current reputation analysis assigns a risk score of 25, categorized as Low Risk. The threat profile indicates no known campaigns, active attacker status, or spam source activity. However, the system flags the address as a "Suspicious Host" with a threat actor classification of "Moderate" confidence. The IP is listed on one DNSBL out of eight total lists scanned.
Observation History
Monitoring data records observations between August 29, 2026, and September 20, 2026. No open ports, TLS certificates, or active web services were identified during service scans. Behavioral analysis shows zero honeypot hits, enumeration strikes, or WAF violations.
Recommendation
The security posture requires low-severity monitoring. The address operates within a stable residential subnet with zero active threat siblings. No immediate blocking is advised; standard logging and monitoring protocols are recommended.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Comcast Cable Communications, LLC |
| ASN | AS7922 |
| Network Name | COMCAST-E1-19 |
| CIDR Block | 96.216.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | lg-2-soag06.sannarbor.mi.michigan.comcast.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | lg-2-soag06.sannarbor.mi.michigan.comcast.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 39% | 2 | 8 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 22% | 1 | 4 |
| geolocation | 19% | 2 | 2 |
| Overall | 22% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 09:59:49 UTC |
| Last Seen | 2026-09-20 06:04:00 UTC |
| Profile Built | 2026-09-23 01:36:27 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 32 |
Full dossier details are available via our API.