Intelligence Briefing: IP 154.54.76.166/32
Risk Assessment
The IP address maintained a Low Risk status with a risk score of 20. No threat indicators, blacklist entries, or known attacker signatures were detected.
Ownership and Registration
Records linked the address to Cogent Communications, LLC (ASN 174) within the 154.54.0.0/16 CIDR block. The origin ASN was 174 with a BGP prefix of 154.48.0.0/12.
Technical Observations
Network scans revealed no open ports; the endpoint remained firewalled with no active services. DNS analysis provided a PTR hostname for `be3148.rcr72.b015654-2.mrs02.atlas.cogentco.com`, but forward resolution failed to confirm. Email authentication records included SPF and DMARC.
Anomalies and Contradictions
Geolocation data listed the origin as the United States with a London city designation. Physics-based validation flagged a contradiction between the claimed location and RTT measurements (100ms observed vs. 152.5ms minimum required for the stated distance).
Recommendations
Analysts recommended monitoring the address due to signal contradictions present in the data. No immediate blocking actions were required based on current evidence.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Cogent Communications, LLC |
| ASN | AS174 |
| Network Name | COGENT-154-54-16 |
| CIDR Block | 154.54.0.0/16 |
| RIR | AFRINIC |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | be3148.rcr72.b015654-2.mrs02.atlas.cogentco.com |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | be3148.rcr72.b015654-2.mrs02.atlas.cogentco.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-05 05:12:38 UTC |
| Last Seen | 2026-09-17 18:51:18 UTC |
| Profile Built | 2026-09-05 05:37:11 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.