144.126.236.144📋 Copy

# IP Intelligence Briefing: 144.126.236.144

Classification: Cloud Compute Infrastructure | Risk Level: Low | Timestamp: Analysis Complete

---

## Executive Summary

IP 144.126.236.144 is a DigitalOcean cloud host located in Slough, England (GB). The asset maintains a low-risk profile with no active threat indicators. The IP operates as a web server running nginx/1.24.0 on Ubuntu, hosting the domain lekota-pk.duduinnovation.com.ng. No malicious activity has been detected in the observation history.

---

## Technical Profile

Ownership & Infrastructure:

• Organization: DigitalOcean, LLC (ASN: 14061)
• Network Block: 144.126.224.0/20 (BGP Prefix)
• Geolocation: Slough, England, GB (Coordinates: 51.5177°N, -0.6215°W)
• Infrastructure Type: Cloud Compute (Cloud Hosted)
• Risk Score: 0 | Provider Score: 0 | Authority Score: 0
• Stability: Route changes detected within 30-day window; not route-stable

Network Services:

TLS Certificate:

• Subject: CN=lekota-pk.duduinnovation.com.ng
• Issuer: CN=YE1, O=Let's Encrypt, C=US
• Validity: Certificate issued and valid (self-signed: false)

---

## Threat Intelligence Assessment

Current Threat Status:

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Abuse Confidence Score: Not applicable (low risk)
• Known Campaigns: None detected

Control Plane Analysis:

• RPKI State: Not validated
• DNSSEC: Valid
• DNSBL Listed: 0/8 lists
• Operator Score: 0.1304 (Minimal)

---

## Observation History Analysis

The IP has generated 23 signal observations across the monitoring period. Key observations include:

HTTP Fingerprinting (June 17, 2026):

• Server: nginx/1.24.0 (Ubuntu)
• Generator: Odoo platform detected
• Status Code: 200
• HTTP Version: 1.1
• Sitemap: https://144.126.236.144/sitemap.xml
• No HSTS or CSP headers configured

Geolocation Validation:

• Average RTT: 97.6ms
• Minimum RTT: 94ms
• Distance from probe location: 506.4km
• Geo-plausibility: Validated

Network Stability:

• Route changes detected in the past 30 days
• Delegation age: Not stable

---

## Relationship Network

The IP shows 23 relationship entries, all classified as "Same Network" relationships to the DigitalOcean network block DIGITALOCEAN-144-126-192-0. This indicates the asset operates within a shared cloud infrastructure environment with multiple peers on the same network segment.

---

## Subnet Neighborhood Analysis

Subnet: 144.126.236.144/24

• Abuse Density: 0%
• Classification: Mostly clean
• Active Siblings: 1
• Threat Siblings: 1 (minor inherited risk)
• Risk Distribution: High (0), Medium (0), Low (0)

The surrounding /24 subnet maintains a clean abuse profile with no significant threat concentration.

---

## Recommended Security Actions

Firewall/Block Decision:

• Recommendation: NO ACTION REQUIRED
• Rationale: Low-risk cloud infrastructure with no threat indicators detected
• Classification: Legitimate commercial hosting environment

Monitoring Recommendations:

1. Monitor for changes in hosted domains (currently: innovate.huducloud.com, lekota-pk.duduinnovation.com.ng)

2. Watch for route stability changes (currently flagged as unstable)

3. Track TLS certificate renewals for domain changes

MITRE ATT&CK Relevance:

• No current ATT&CK technique mappings detected
• No correlation with known campaigns

---

## Conclusion

IP 144.126.236.144 represents a legitimate DigitalOcean cloud hosting asset with no evidence of malicious activity. The infrastructure is properly configured for web hosting with standard services (HTTP/HTTPS/SSH). SOC analysts may monitor for changes in the hosted domain portfolio but no immediate blocking or investigation actions are warranted based on current intelligence.

Intelligence Confidence: High | Last Updated: Analysis Complete

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.