66.28.3.135
The IP address 66.28.3.135/32 was associated with Cogent Communications, LLC (ASN 174) within the 66.28.0.0/16 CIDR block. Infrastructure analysis identified the host as a Web Server running Apache/2.4.63 on AlmaLinux with OpenSSL/3.5.5. Open ports 80 and 443 were observed, and a valid TLS certificate from Let's Encrypt was issued for cogentco.com. DNS records resolved to mirror01-hhc.sys.cogentco.com with valid SPF and DMARC configurations.
Threat assessment classified the reputation as Low Risk with a risk score of 25. No blacklist entries, known attacker indicators, or spam source flags were present. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. A contradiction existed regarding geolocation data, where the claimed location of Dallas, TX, US conflicted with RTT physics measurements. Overall profile confidence was rated Very Low due to signal contradictions.
The recommendation for this asset was to Monitor with low severity due to signal contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Cogent Communications, LLC |
| ASN | AS174 |
| Network Name | COGENT-NB-0000 |
| CIDR Block | 66.28.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | mirror01-hhc.sys.cogentco.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | mirror01-hhc.sys.cogentco.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/6 domains |
| DMARC | 2/6 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 6 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Apache/2.4.63 (AlmaLinux) OpenSSL/3.5.5 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.cnms.cogentco.com*.cogentco.com*.dev.cogentco.com*.dns.cogentco.com*.elk.cogentco.com*.globalpeerconnect.com*.globalpeerexchange.com*.lb.cogentco.com*.ms.cogentco.com*.prod.cogentco.com |
| Valid From | 2026-08-10T04:58:34+00:00 |
| Valid Until | 2026-11-08T04:58:33+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 066C4F8FED7683805BA1DE82A7662D1148D4 |
| Thumbprint | 1561966AAFB8E6F646273EFB89358EFAE5138C7F |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 4 |
| Overall | 23% | 10 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-30 10:05:25 UTC |
| Last Seen | 2026-09-21 03:10:27 UTC |
| Profile Built | 2026-09-21 03:20:25 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 39 |
Full dossier details are available via our API.