154.54.56.222
Between 2026-08-29 and 2026-09-23, IP 154.54.56.222 maintained a low-risk reputation score of 25. Ownership records identified the address within Cogent Communications, LLC (ASN 174, 154.54.0.0/16). Network scans revealed the host was firewalled with no open ports, TLS certificates, or active web services. Geolocation data presented contradictions; sources conflicted on the country of origin (US vs. GB), and Round-Trip Time (RTT) measurements of 95ms violated the minimum physical latency of 152.5ms for the reported distance. Despite these inconsistencies, the address appeared in a clean neighborhood with zero abuse density and zero blacklists. Behavioral analysis showed no honeypot hits or enumeration strikes. While the profile was labeled "Low Risk," the presence of signal contradictions and generic "Suspicious Host" tagging resulted in a low-severity monitor recommendation. No specific threat actors or campaigns were linked to the IP.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cogent Communications, LLC |
| ASN | AS174 |
| Network Name | COGENT-154-54-16 |
| CIDR Block | 154.54.0.0/16 |
| RIR | AFRINIC |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | be3893.rcr61.rhe01.atlas.cogentco.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | be3893.rcr61.rhe01.atlas.cogentco.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 8 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 32% | 1 | 5 |
| geolocation | 36% | 2 | 8 |
| Overall | 27% | 10 | 27 |
| Data Coherence | Mixed Signals (60%) — 2 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: GB, US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 11:21:18 UTC |
| Last Seen | 2026-09-23 08:48:59 UTC |
| Profile Built | 2026-09-23 09:24:09 UTC |
| Data Freshness | Live |
| Signal Types | 31 |
| Total Observations | 52 |
Full dossier details are available via our API.