157.173.125.157📋 Copy

IP Intelligence Briefing: 157.173.125.157

Date: 2026-06-12

---

**1. Risk Profile**

• Risk Score: 65/100 (Moderate Risk)
• Provider: Contabo (Cloud Compute Hosting)
• Ownership: Registered to Johannes Selg (AS: 51167, ARIN)
• Geolocation: Germany (DE), Lauterbourg, 51.17°N, 10.45°E
• Network Role: Cloud-hosted web server (HTTP/HTTPS services, HTTP/2, HSTS, CSP headers)

---

**2. Threat & Security Indicators**

• Threat Status: No direct indicators of malicious activity (no known attackers, spam, or Tor exit nodes).
• DNS Associations: Linked to mail.youplex.cc (SPF validated, no DMARC).
• TLS: Valid certificate (self-signed, issuer: www.example.org).
• Security Headers: HSTS, CSP, HTTP/2 enabled.

---

**3. Network & Subnet Analysis**

• Subnet: 157.173.125.157/24 (abuse density: 0, classified as "clean").
• Neighbors: No active or risky sibling IPs in the subnet.
• BGP: Stable route (no recent changes), RPKI valid.

---

**4. Historical Observations**

• Recent Activity (2026-06-12):

- HTTP/2 service with 200 OK responses.

- Operator score: 0.26 (Basic trust level).

- No persistent malicious activity or ownership changes.

---

**5. Recommended Actions**

• Monitoring: Increase logging verbosity for this IP.
• Firewall Rules:

- iptables: `iptables -A INPUT -s 157.173.125.157 -j DROP`

- Cloudflare WAF: Block IP with rule: `ip.src eq 157.173.125.157`

- AWS WAF: Add `157.173.125.157/32` to IP set.

---

Conclusion: This IP hosts a cloud-based web service with moderate risk. While no immediate threats are detected, its association with mail.youplex.cc and moderate risk score warrant monitoring. Apply firewall rules to restrict access and verify DNS configurations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.