109.199.126.3📋 Copy

IP Intelligence Briefing: 109.199.126.3

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Score: Low (30/100) | No active threats detected
• Ownership: Registered to Johannes Selg (Contabo, ASN 51167)
• Geolocation: Lauterbourg, Germany (51.17°N, 10.45°E)
• Network Role: Cloud compute instance (Contabo) with HTTP/SSH/RDP services
• Threat Indicators: No malware, phishing, or exploit activity detected

---

**2. Observation History**

• Consistent Behavior: Stable HTTP responses (Apache/2.4.58) and open ports (80, 22, 8443, 3389) since 2026-06-13.
• No Anomalies: No spikes in scanning, DNS changes, or TLS certificate issues.
• Neighbor Risk: Subnet (109.199.126.3/24) has 0.5 abuse density, with 1 high-risk neighbor (109.199.126.83).

---

**3. Relationships & Dependencies**

• DNS: Linked to vmi3335816.contaboserver.net (Contabo-hosted VM).
• Network: Shares subnet with TT-20240214 (Contabo infrastructure).
• Services: Exposes SSH, HTTP, and RDP; no misconfigured SSL/TLS detected.

---

**4. Neighborhood Analysis**

• Subnet: 109.199.126.3/24
• Abuse Density: 0.5 (low risk)
• Neighbors:

- 109.199.126.83: Risk score 25 (moderate risk, potential monitoring target).

---

**5. Recommendations**

• Monitor Neighbor: 109.199.126.83 shows higher risk; investigate if part of a shared infrastructure compromise.
• Secure Services: Ensure SSH/RDP uses strong credentials; consider blocking unused ports (e.g., 3389).
• Verify DNS: Confirm no unauthorized subdomains or misconfigurations in contaboserver.net.

Conclusion: 109.199.126.3 is a low-risk Contabo-hosted server with no active threats. Focus on subnet neighbor 109.199.126.83 and standard security hygiene for exposed services.

*Generated by IPDebrief – Cybersecurity Threat Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.