144.126.159.116📋 Copy

## IP Intelligence Briefing: 144.126.159.116/32

Classification: Low Risk - Cloud Infrastructure Asset

Date: Current Analysis Cycle

Provider: Contabo Inc. (AS40021)

---

Executive Summary

IP 144.126.159.116 is a low-risk cloud compute resource hosted on Contabo infrastructure. The asset shows no active threat indicators, minimal abuse history, and standard residential hosting characteristics. Current risk assessment score: 25/100.

Infrastructure Profile

• Organization: Contabo Inc. (CONTA-48)
• ASN: AS40021
• CIDR Block: 144.126.128.0/19
• Geolocation: United States (Missouri, St. Louis)
• Infrastructure Type: Cloud Compute
• DNS Resolved: vmi2738012.contaboserver.net

Threat Assessment

Current Risk Level: Low (Score: 25/100)

Threat Indicators:

• No active threat indicators detected
• Not a Tor exit node
• Not identified as known attacker
• Not listed as spam source
• Blacklist count: 0

Control Plane:

• DNSSEC: Valid
• Route Stability: Unstable
• DNSBL Listings: 1/8 total lists
• RPKI State: Not evaluated

Service Exposure

Network Services: None detected

• No open ports identified
• No TLS certificates observed
• No HTTP banners or web services detected
• Classification: Firewalled/No Services

Historical Analysis

Observation Count: 18 historical signals tracked

Temporal Trends:

• 2026-06-16: Recent proxy classification observed (risk: 66) via proxycheck-io
• 2026-06-11: Subnet classification showed "clean" status with zero abuse density
• Threat persistence: Not persistent
• Ownership changes: None recorded

Neighborhood Analysis

Subnet: 144.126.159.116/24

• Abuse Density: 0
• Threat Siblings: 0
• Active Siblings: 0
• Classification: Clean

Geolocation Validation

• Distance from expected location: 7,115.6 km
• Minimum possible RTT: 142.3ms
• Observed RTT: 50-54.4ms (anomaly detected)
• GeoValidation: Plausibility flag raised due to RTT discrepancy

Related Entities

DNS Associations: vmi2738012.contaboserver.net

Network Associations: CONTA-48 (Contabo Inc.)

Correlated IPs: 0 correlated IPs in threat campaigns

Security Actions

Recommended Actions: None

• No firewall rules or blocking recommendations generated
• Asset exhibits standard cloud hosting behavior
• Monitoring recommended but no immediate remediation required

Intelligence Assessment

The IP address represents a legitimate cloud hosting asset with no malicious activity observed. The recent proxy classification (2026-06-16) warrants awareness but does not indicate malicious intent given the overall low-risk profile and clean neighborhood analysis. The RTT/geolocation anomaly may indicate routing irregularities or measurement error but does not alter the threat assessment.

Recommendation: Continue standard monitoring. No immediate blocking or remediation actions required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.