209.126.2.173📋 Copy

# IP Intelligence Briefing: 209.126.2.173/32

## Executive Summary

Risk Level: LOW (Score: 25/100) — No active threat indicators detected. IP belongs to cloud hosting infrastructure with clean neighborhood profile. No firewall action recommended.

---

## Profile Overview

IP Address: 209.126.2.173

Organization: Contabo Inc. (ASN 40021)

Network Block: 209.126.0.0/20 (CONTA-48)

Geolocation: St. Louis, Missouri, US

Infrastructure Type: Cloud Compute / Single-Service Host

DNS PTR: vmi3422846.contaboserver.net

## Network Classification

• Cloud Provider: Yes (Contabo)
• Hosting Service: Yes
• CDN: No
• VPN/Proxy: No
• Tor Exit Node: No
• Mobile/Residential: No

## Threat Indicators

• Abuse Confidence Score: Not available
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Campaign Association: None detected

## Services & Ports

• Open Port 22 (SSH): Yes
• HTTP/HTTPS: Not detected
• TLS Certificate: None

## Neighborhood Analysis (209.126.2.0/24)

• Abuse Density: 0 (Clean)
• Active Siblings: 2
• Threat Siblings: 0
• Neighbor Risk Distribution: 1 low, 0 medium, 0 high
• Notable Neighbor: 209.126.2.70 (Risk Score: 0)

## Temporal History

• Total Observations: 24
• Recent Activity: August 2026
• Threat Persistence: 0 days
• Persistent Malicious Activity: No
• Ownership Changes: 0

## Related Entities

DNS Associations:

• vmi3422846.contaboserver.net (primary hostname)

Network Associations:

• CONTA-48 (Contabo Inc. network)

## Operational Context

Control Plane:

• BGP Prefix: 209.126.0.0/20
• Route Stability: Not stable
• DNSBL Listed: 1 of 8 total lists
• RPKI State: Not available
• Geolocation Validation: ICMP blocked during probe (unable to validate)

## Security Assessment

This IP address operates as a standard cloud hosting virtual machine (VPS) within Contabo's infrastructure. The subnet exhibits no abuse activity, and the IP itself shows no threat indicators. The open SSH port is consistent with VPS provisioning and does not indicate malicious intent.

## SOC Analyst Guidance

Recommended Action: No action required.

Monitoring Priority: Low

Threat Context: Benign cloud infrastructure

If traffic originates from this IP, allow standard connectivity. No blocking or alerting recommended based on current intelligence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.