161.97.118.193📋 Copy

IP Intelligence Briefing: 161.97.118.193

*Generated via IPDebrief tools: profile, history, relationships, and neighbors analysis*

---

**Key Findings**

• Risk Profile:

- Overall Risk: Low (Risk Score: 25/100).

- Provider: Contabo (Cloud Hosting).

- Geolocation: Germany (Lauterbourg, Grand Est region).

- Network Role: CloudCompute server, hosting a website (Apache HTTP server).

• Threat Indicators:

- No malicious activity detected (no malware, phishing, or exploit signs).

- TLS certificate valid (Let’s Encrypt, SANs include `mail.n8store.net`).

- No DNSBL listings or known attacker associations.

• Network Context:

- Subnet 161.97.118.0/24 has 0 abuse density, with 1 low-risk neighbor (161.97.118.225, Risk Score: 0).

- IP is part of a hosting infrastructure (Contabo), with no residential/mobile carrier ties.

• Recent Observations (June 13, 2026):

- HTTP/HTTPS services active (port 80/443).

- SSH access enabled (port 22, OpenSSH 8.0).

- No suspicious banners, HTTP headers, or TLS anomalies.

---

**Actionable Insights**

1. No Immediate Threat:

- The IP is a legitimate cloud-hosted server with no malicious indicators.

- Subnet and neighboring IPs show no abuse activity.

2. Monitor for Anomalies:

- Track changes in service banners or TLS configurations (e.g., certificate renewals).

- Validate DNS records (`vmi3309896.contaboserver.net`) for potential subdomain drift.

3. SOC Recommendations:

- Allow traffic to the IP for legitimate web/SSH access, but enforce rate limiting on HTTP/HTTPS to mitigate potential DDoS risks.

- Ensure firewall rules align with Contabo’s infrastructure classification (CloudCompute).

---

Conclusion:

161.97.118.193 is a low-risk, cloud-hosted server with no signs of malicious activity. No action required unless anomalous behavior is observed.

*Data sourced from IPDebrief’s threat intelligence platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.