154.18.2.107
Intelligence Briefing: 154.18.2.107/32
Overview
The IP address 154.18.2.107/32 was assessed with a Low Risk reputation and a risk score of 25. Observations were recorded between 2026-09-07 and 2026-09-18, with the profile computed on 2026-09-18.
Ownership and Geolocation
Ownership records identified Cogent Communications, LLC (ASN 174) within the Afrinic RIR. Geolocation data placed the host in Singapore, though sources disagreed on country attribution, with conflicting data indicating the US.
Technical Status
Network probing indicated the host was firewalled with no open services detected. Forward DNS resolution was unconfirmed, and no PTR hostnames were resolved. The control plane showed the BGP prefix 154.18.0.0/15 was not route stable.
Threat Context
No specific threat indicators, known campaigns, or blacklist listings were observed. The threat actor classification labeled the host as "Suspicious Host" due to present threat indicators without specific classification. Two active threat siblings were identified within the 154.18.2.107/24 subnet, contributing an inherited risk score of 5.
Recommendation
Analysts were advised to Monitor the address. The recommendation was driven by signal contradictions present in the data, specifically regarding geo-location and route stability.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cogent Communications, LLC |
| ASN | AS174 |
| Network Name | COGENT-154-18-16 |
| CIDR Block | 154.18.0.0/16 |
| RIR | AFRINIC |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 01:35:14 UTC |
| Last Seen | 2026-09-18 03:22:29 UTC |
| Profile Built | 2026-09-18 03:38:41 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 27 |
Full dossier details are available via our API.