154.54.44.194
Intelligence Briefing: 154.54.44.194/32
Overview
The IP address 154.54.44.194/32 is associated with Cogent Communications, LLC (ASN 174) and is geolocated to the United States (Coordinates: 37.75, -97.82). The address is categorized as Low Risk with an overall risk score of 25.
Network & DNS Status
Reverse DNS resolution returned be2427.rcr61.sao02.atlas.cogentco.com. Forward resolution confirmation was not established. Network scans detected no open ports, classifying the service purpose as Firewalled / No Services. The associated domain (cogentco.com) maintains valid SPF and DMARC records, though DNSSEC and CAA records are absent.
Threat Indicators
While the overall reputation is Low Risk, the address is classified as a Suspicious Host with a threat actor tag indicating suspicion. Control plane analysis showed the address is listed on one DNS blacklist out of eight total checks. No specific campaigns, correlated IPs, or active attack behaviors were observed. The IP has been active since 2026-09-05.
Recommendation
Current analysis recommends Monitoring. Due to the suspicious host classification and presence on a single blacklist, defensive teams should continue to observe the address for anomalous traffic patterns despite the low-grade risk indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cogent Communications, LLC |
| ASN | AS174 |
| Network Name | COGENT-154-54-16 |
| CIDR Block | 154.54.0.0/16 |
| RIR | AFRINIC |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | be2427.rcr61.sao02.atlas.cogentco.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | be2427.rcr61.sao02.atlas.cogentco.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-05 02:40:28 UTC |
| Last Seen | 2026-09-05 02:40:28 UTC |
| Profile Built | 2026-09-05 05:32:53 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.