164.68.107.238📋 Copy

# IP Intelligence Briefing: 164.68.107.238/32

## Executive Summary

IP address 164.68.107.238 presents a Low Risk profile with a risk score of 25. The address operates as a cloud hosting server within the Contabo infrastructure, located in Germany. No active threat indicators were observed during the assessment period.

## Technical Profile

• Risk Score: 25 (Low Risk)
• Provider: Contabo (ASN 51167)
• Organization: Johannes Selg
• Infrastructure Type: CloudCompute / Hosting
• Network Role: Firewall / No Services
• DNS Resolution: vm-3217292.contaboserver.net
• PTR Record: vm-3217292.contaboserver.net

## Geographic & Infrastructure Data

• Location: Lauterbourg, Grand Est, Germany (DE)
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin
• Geolocation Consensus: True
• Route Stability: False (route changes detected within 30 days)
• Operator Score: 0.2609 (Basic)
• DNSBL Status: Listed on 1 of 8 DNSBLs

## Threat Intelligence Assessment

• Abuse Confidence Score: Not available
• Known Attacker Status: False
• Spam Source Status: False
• Tor Exit Node: False
• Blacklist Count: 0
• Campaign Indicators: None detected
• Known Campaigns: None

## Network Neighborhood Analysis

• Subnet: 164.68.107.0/24
• Abuse Density: 1
• Classification: Mostly Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1
• Inherited Risk: 2

## Historical Observation Context

The IP address generated 20 observations during the assessment period. Recent signals from June 15, 2026, confirmed:

• Cloud infrastructure classification with 0.90 confidence
• Provider identification as Contabo with 0.85 confidence
• Geographic location in Germany with 0.52 confidence
• No persistent malicious behavior detected

Temporal analysis indicates:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 1
• Persistently malicious flag: False

## Network Relationships

The IP maintains 39 documented relationships, primarily network-level associations with CONTABO infrastructure. No certificate or organization-specific relationships were identified beyond the provider network.

## Actionable Recommendations

Based on the low-risk profile (score 25) and absence of active threat indicators:

• No immediate blocking required
• Monitor for service changes given the "Firewall / No Services" classification
• Review DNSBL listing (1 of 8 lists) to determine if delisting is warranted
• Continue passive monitoring for behavioral changes

---

Assessment Date: Current

Risk Level: Low

Recommended Action: Monitor

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.