24.207.66.154
IP Intelligence Briefing: 24.207.66.154
*Generated via IPDebrief Analysis*
---
**Key Findings**
1. Risk Profile:
- Risk Score: 80/100 (High Risk).
- Ownership: Owned by Delta DCCNet High Speed Internet (AS11260), registered to a Canadian ISP.
- Geolocation: Located in Delta, British Columbia, Canada (geolocation confirmed via ARIN records).
- Network Role: Single-service host (SSH on port 22).
2. Threat Indicators:
- No active malware, phishing, or known attacker associations.
- SSH Service: Open on port 22 with Dropbear version 2019.78. Banner indicates potential exposure but no direct malicious activity.
- Subnet Context: Part of 24.207.64.0/22 subnet with low abuse density (1/10).
3. Observation History:
- Recent signals show basic network stability but no persistent malicious activity.
- DNS resolution confirmed for `host-24-207-66-154.public.eastlink.ca`, linked to the ISP.
4. Neighbor Analysis:
- No active neighboring IPs in the /24 subnet (likely a single-host network).
5. Recommended Actions:
- Block via Firewall:
- `iptables -A INPUT -s 24.207.66.154 -j DROP`
- `nft add rule inet filter input ip saddr 24.207.66.154 drop`
- AWS WAF/Cloudflare WAF rules provided for additional protection.
- Monitor: Increase logging verbosity for SSH activity due to elevated risk.
---
**Conclusion**
The IP is associated with a Canadian ISP and appears to host a single service (SSH). While no direct malicious activity is detected, its high risk score and open SSH port warrant monitoring. Use the provided firewall rules to block traffic from this IP and investigate further if unusual activity is observed.
*Note: This analysis is based on IPDebrief data as of 2026-06-18.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Delta DCCNet High Speed Internet |
| ASN | AS11260 |
| Network Name | DLTA-24-207-64-0 |
| CIDR Block | 24.207.64.0/22 |
| RIR | ARIN |
| Country | Canada |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | host-24-207-66-154.public.eastlink.ca |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | host-24-207-66-154.public.eastlink.ca |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-dropbear_2019.78 l@?C???$?Uu?????curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-n |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 28% | 2 | 3 |
| ownership | 15% | 2 | 2 |
| reputation | 26% | 1 | 3 |
| geolocation | 21% | 2 | 2 |
| Overall | 22% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Fresh
| First Seen | 2026-05-07 23:04:14 UTC |
| Last Seen | 2026-06-26 18:11:11 UTC |
| Profile Built | 2026-06-25 09:38:21 UTC |
| Data Freshness | Fresh |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.