209.126.6.35📋 Copy

IPDEBRIEF INTELLIGENCE BRIEFING

Subject: 209.126.6.35/32

Classification: LOW RISK / MONITOR

Generated: 2026-06-21

---

EXECUTIVE SUMMARY

Intellectal analysis indicates 209.126.6.35 operates as a Contabo cloud VPS with minimal threat indicators. The IP exhibits a low-risk profile (Score: 25) with no active malicious associations. No immediate blocking required, though standard monitoring recommended.

---

PROVENANCE & INFRASTRUCTURE

• Organization: Contabo Inc. (AS40021)
• Network Block: 209.126.0.0/20 (CONTA-48)
• Infrastructure Type: Cloud Compute / Hosting
• Geolocation: St. Louis, Missouri, US (Geo-validated, 2500km accuracy radius)
• Hostname: vmi3278046.contaboserver.net (Virtual Machine Instance identifier)
• Stability: Ownership stable (0 changes); Route stable

---

THREAT INDICATORS

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not elevated
• Known Campaigns: None detected
• Blacklist Status: 0/8 threat feeds; 1 DNSBL listing
• Tor/Proxy/VPN: Negative on all indicators
• Open Services: None detected (firewalled/no services exposed)
• TLS/Certificates: No active TLS certificates

---

NETWORK BEHAVIOR

• Service Purpose: Firewalled / No Services
• Connection Type: Cloud-hosted infrastructure
• Routing: Transit via Comcast, Cogent Networks
• Control Plane: Basic operator classification (Score: 0.2609)
• DNSSEC: Validated

---

NEIGHBORHOOD ASSESSMENT

• Subnet: 209.126.6.35/24
• Abuse Density: 0%
• Classification: Clean
• Threat Siblings: 0 of 1 active sibling
• Risk Distribution: No high/medium risk neighbors

---

OBSERVATION HISTORY

• Total Observations: 23 signals
• Recent Activity:

- 2026-06-21: Hostname resolution (vmi3278046.contaboserver.net)

- 2026-06-16: Control plane data (Basic classification), subnet classification (Clean)

• Threat Persistence: 0 days
• Malicious Activity: No persistent malicious signals observed

---

RELATIONSHIP GRAPH

• 17 relationships identified
• Primary associations: Contabo network block (CONTA-48), DNS hostname (vmi3278046.contaboserver.net)
• No external entity correlations detected

---

RECOMMENDED ACTIONS

1. Allow Traffic: No blocking required based on current threat profile

2. Monitor: Standard SOC monitoring for network activity

3. Correlate: Flag only if correlated with known malicious infrastructure

4. Block Threshold: Consider blocking if risk score exceeds 50 or threat indicators emerge

---

INTEL CONCLUSION

209.126.6.35 is a Contabo-managed cloud VPS with clean threat posture. The infrastructure shows no evidence of malicious use, with firewall-protected services and no threat feed associations. Maintain standard monitoring; no immediate defensive action required.

---

*Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.