38.45.67.7
Intelligence briefing for IP 38.45.67.7/32.
The IP address was assigned to Cogent Communications, LLC (ASN 174) within the 38.0.0.0/8 block and maintained a low-risk classification with a score of 25. Network role assessment identified the host as a Web Server exposing ports 80, 443, and 22. The HTTP banner reported Apache/2.4.66 running on Ubuntu, and TLS certificates were issued by Let's Encrypt for the proxymymail.com domain. DNS hygiene was rated Good, with SPF and DMARC records confirmed.
Threat observation history showed no active campaigns, known attacker status, or spam source activity. However, control plane data indicated one DNSBL listing out of eight total lists. Behavioral analysis recorded zero incidents, honeypot hits, or enumeration strikes. Geolocation data placed the system in Durham, North Carolina, but RTT validation contradicted this claim, as a measured time of 43ms was physically impossible for the stated 6638.3km distance.
Routing analysis noted an origin ASN 174 with a 38.45.64.0/22 prefix, though route stability was low with three changes in the preceding 30 days. The immediate /24 subnet was classified as clean with zero threat siblings. Due to signal contradictions and low overall confidence, the recommended action was Monitor with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cogent Communications, LLC |
| ASN | AS174 |
| Network Name | COGENT-A |
| CIDR Block | 38.0.0.0/8 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | proxymymail.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | proxymymail.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache/2.4.66 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.6 |
🔐 TLS Certificate
| SANs | *.proxymymail.comproxymymail.com |
| Valid From | 2026-07-27T00:27:19+00:00 |
| Valid Until | 2026-10-25T00:27:18+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 058A26C39DDD90B7EBBBC942329D4717A1CF |
| Thumbprint | FA7F6FDF723770F64329DE2CE792FC2DE2FAF92F |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 48% | 3 | 4 |
| services | 27% | 2 | 3 |
| ownership | 36% | 3 | 4 |
| reputation | 13% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 30% | 13 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-12 09:50:07 UTC |
| Last Seen | 2026-09-19 14:24:25 UTC |
| Profile Built | 2026-09-19 15:02:09 UTC |
| Data Freshness | Live |
| Signal Types | 31 |
| Total Observations | 37 |
Full dossier details are available via our API.