141.255.166.156
IP INTELLIGENCE BRIEFING
Target: 141.255.166.156/32
Classification: LOW RISK / MONITORING
---
EXECUTIVE SUMMARY
IP 141.255.166.156 presents as a low-risk infrastructure endpoint with zero risk score and no known threat indicators. The IP is associated with Air VPS COMP VPS Provider (ASN 51852), a RIPE-registered provider in Zurich, Switzerland. No malicious activity, blacklist listings, or campaign correlations detected.
OWNERSHIP & INFRASTRUCTURE
- ASN: 51852 (Air VPS COMP VPS Provider)
- Organization: AIRVPSCOMP_VPSPROVIDER
- CIDR Block: 141.255.166.128/26
- RIR: RIPE
- Geolocation: Zurich, Switzerland (46.82°N, 8.23°E)
THREAT ASSESSMENT
- Overall Risk Score: 0/100 (Low Risk)
- Abuse Confidence Score: Not applicable
- Blacklist Count: 0
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Threat Feeds: None correlated
NETWORK CHARACTERISTICS
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- Connection Type: Not determined
- BGP Prefix: 141.255.160.0/21
- Route Stability: Unstable (isRouteStable: false)
- DNSSEC: Valid
- Traceroute: 30 hops, transit networks include Comcast, Cogent
DNS & HOSTNAMES
- PTR Record: neck-mtu.elseblog.com
- Associated Domain: elseblog.com
- Forward Resolution Count: 1
- Forward Confirmed: No
- Email Authentication: SPF/DMARC not configured
NEIGHBORHOOD ANALYSIS
- Subnet: 141.255.166.156/24
- Abuse Density: 0 (Clean)
- Active Siblings: 0
- Threat Siblings: 0
- Risk Classification: Clean
OBSERVATION HISTORY (17 Observations)
Most recent signals observed 2026-07-23:
- Geolocation signals (Switzerland, confidence 0.40)
- DNS/hostname associations (elseblog.com)
- Blacklist checks (8 total lists, 0 listings)
- DNSSEC validation (valid)
No evidence of persistent malicious behavior or ownership changes.
RECOMMENDED ACTIONS
No immediate firewall rules or blocking recommendations required. Standard network monitoring recommended. The IP presents no actionable threat indicators and may be safely permitted with basic logging.
ASSESSMENT: The target IP is a low-risk endpoint from a legitimate VPS provider infrastructure with no malicious associations. SOC analysts may monitor but no immediate mitigation required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Air VPS COMP VPS Provider |
| ASN | AS51852 |
| Network Name | AIRVPSCOMP_VPSPROVIDER |
| CIDR Block | 141.255.166.128/26 |
| RIR | RIPE |
| Country | CH |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | neck-mtu.elseblog.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | neck-mtu.elseblog.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS51852 |
| Network Prefix | 141.255.160.0/21 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 13% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 2 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-03 16:06:26 UTC |
| Last Seen | 2026-08-25 04:31:41 UTC |
| Profile Built | 2026-08-29 09:11:21 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 141.255.166.156
Who owns the IP address 141.255.166.156?
141.255.166.156 is registered to Air VPS COMP VPS Provider. The address falls within the 141.255.166.128/26 network block. Registration is held at RIPE.
Where is 141.255.166.156 located?
Geolocation data places 141.255.166.156 in Zurich, Zurich, Switzerland. The local time zone is Europe/Zurich. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 141.255.166.156 malicious or safe?
141.255.166.156 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 141.255.166.156?
The reverse DNS (PTR) record for 141.255.166.156 is neck-mtu.elseblog.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.