38.104.154.234
Intelligence Briefing: 38.104.154.234/32
Overview and Risk Assessment
The IP address 38.104.154.234/32 was assessed as Low Risk with a risk score of 20. Data freshness indicates live observations between 2026-09-14 and 2026-09-27. The overall confidence in the assessment is labeled Very Low due to conflicting signals and insufficient data coverage.
Infrastructure and Ownership
Ownership was attributed to Cogent Communications, LLC (ASN 174) within the 38.0.0.0/8 block under the ARIN RIR. Network role analysis indicated the host was firewalled with no open services detected. The network path traversed Comcast and Cogent transit networks with a hop count of 12.
Threat Intelligence
No active threat indicators were found. The address was not flagged as a known attacker, spam source, or Tor exit node. Zero blacklist entries were recorded, and no known campaigns were associated with the IP. Behavioral analysis showed no honeypot hits, enumeration strikes, or WAF violations.
Geolocation and Validation
Geolocation data placed the address in Toronto, ON, US. However, the geolocation consensus was inconsistent, with sources disagreeing between the United States and Canada. Validation checks revealed a contradiction between claimed geolocation and RTT physics measurements, noting a 29ms round-trip time against a minimum possible distance of 112ms for the reported location.
DNS and Email
DNS PTR records resolved to Mail.mizeminces.com. Forward resolution was not confirmed. The associated domain lacked SPF and DMARC records, and no TXT records were present. Email authentication scores were unavailable.
Recommendation
Due to signal contradictions regarding geolocation and RTT metrics, the asset was assigned a Monitor status with low severity. No immediate firewall rules were generated. Analysts are advised to watch for changes in network behavior or the emergence of active indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cogent Communications, LLC |
| ASN | AS174 |
| Network Name | COGENT-A |
| CIDR Block | 38.0.0.0/8 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | Mail.mizeminces.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | Mail.mizeminces.com |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 27% | 2 | 3 |
| Overall | 20% | 10 | 12 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-14 12:48:34 UTC |
| Last Seen | 2026-09-27 10:28:25 UTC |
| Profile Built | 2026-09-27 10:34:48 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 28 |
Full dossier details are available via our API.