IP address 206.148.25.52 was observed with a Low Risk reputation score of 25. The address is owned by Cogent Communications, LLC (ASN 7578) and geolocated to Los Angeles, CA. DNS queries returned the PTR hostname po4.ash-eqxdc10-cr2.globalsecurelayer.com, while forward resolution remained unconfirmed. Network scans showed no open ports, and the service purpose was classified as Firewalled.
Threat indicators were absent, and the host was not flagged as a known attacker or spam source. The IP appeared on one DNS blacklist out of eight checked sources. The surrounding subnet 206.148.25.0/24 was classified as mostly_clean with an abuse density of 0.0714 and contained two threat siblings. Behavioral analysis recorded zero enumeration strikes, WAF violations, or honeypot hits.
Despite the "Suspicious Host" threat actor tag, the operational recommendation was to Monitor the IP with low severity, citing the low-risk score and clean neighborhood context. Data signals were active as of 2026-09-22.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Cogent Communications, LLC |
| ASN | AS7578 |
| Network Name | COGENT-206-148 |
| CIDR Block | 206.148.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | po4.ash-eqxdc10-cr2.globalsecurelayer.com |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | po4.ash-eqxdc10-cr2.globalsecurelayer.com |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-06 16:07:13 UTC |
| Last Seen | 2026-09-22 17:26:38 UTC |
| Profile Built | 2026-09-22 17:39:04 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 30 |
Full dossier details are available via our API.