150.95.26.141📋 Copy

IP Intelligence Briefing: 150.95.26.141/32

*Generated via IPDebrief Network Intelligence Suite*

---

**1. Core Profile**

• Risk Assessment: Moderate Risk (Risk Score: 40) | No known malicious indicators
• Ownership:

- ASN: 135161 | Organization: IRT-GMOINTERNETINC-JP (Thai entity)

- Subnet: 150.95.26.0/24 | RIR: APNIC

• Geolocation:

- Country: Thailand (TH) | Timezone: Asia/Bangkok

- Geo-Plausibility: Low (inferred via multi-signal inference)

• Network Role:

- Web Server | Services: HTTP (80), HTTPS (443), SSH (22), HTTPS-alt (8443)

- TLS Certificate: Valid (Let’s Encrypt Authority X3) | Server Banner: Nginx

---

**2. Threat & Behavior**

• Threat Indicators:

- No known spam, attacker, or Tor exit node associations

- No detected malware campaigns or blacklisted activity

• Observation History (30d):

- 21 signals recorded | 14 unique observations

- No persistent malicious activity | Threat Persistence Days: 0

• Subnet Abuse Density:

- 1/24 subnet | Mostly Clean classification | 1 threat sibling detected

---

**3. Relationships & Context**

• DNS Associations:

- Hostname: `v150-95-26-141.a00d.g.bkk1.static.cnode.io`

- No email auth (SPF/DKIM) detected

• Network Connections:

- Linked to subnet `ZCOM-THAI` (same provider)

- No CDR (Cloud/DNS/Residential) or mobile carrier indicators

---

**4. Recommendations**

• Monitoring: Track for unexpected service changes (e.g., new ports, SSL certificate renewals).
• Firewall: No immediate blocking required; monitor for anomalies in traffic patterns.
• Subnet Context: Investigate the 150.95.26.0/24 subnet for potential lateral movement risks.

---

Conclusion:

The IP is a legitimate web server in Thailand with no current malicious indicators. While the subnet shows low abuse density, ongoing monitoring is advised to detect any emerging risks.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.