206.148.24.94
Intelligence Briefing: 206.148.24.94/32
Ownership and Network Role
The address was attributed to Cogent Communications, LLC (ASN 7578) within the CIDR block 206.148.0.0/15. Network role analysis indicated the node was firewalled with no active services, open ports, or identified infrastructure type.
DNS and Geolocation
Reverse DNS resolution linked the IP to the hostname vl3.bne-ndcb2-vxlan1.globalsecurelayer.com, though forward confirmation was not established. Geolocation data reported the location as the United States with coordinates 37.75, -97.82, although ICMP validation was blocked.
Threat Indicators
The IP was categorized as a suspicious host with a low-risk reputation score of 25. Blacklist analysis showed conflicting data; while the blacklist count was zero, the control plane indicated one DNSBL listing across eight total lists. No specific known campaigns, attacker affiliations, or threat actor types were correlated. Behavioral analysis recorded zero total incidents and no honeypot hits.
Recommendation
Due to low-grade risk indicators and insufficient data to classify intent, the recommended action was to monitor the address. The overall confidence level was labeled very low.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cogent Communications, LLC |
| ASN | AS7578 |
| Network Name | COGENT-206-148 |
| CIDR Block | 206.148.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vl3.bne-ndcb2-vxlan1.globalsecurelayer.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | vl3.bne-ndcb2-vxlan1.globalsecurelayer.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-10 13:16:08 UTC |
| Last Seen | 2026-09-10 13:16:08 UTC |
| Profile Built | 2026-09-10 13:30:54 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.