164.68.124.190📋 Copy

# IP Intelligence Briefing: 164.68.124.190/32

Classification: Low Risk

Risk Score: 25/100

Last Updated: Current Intelligence Cycle

---

## Executive Summary

IP address 164.68.124.190 is a Contabo cloud infrastructure endpoint located in Lauterbourg, France, associated with organization "Johannes Selg" (ASN: 51167). The IP demonstrates minimal threat indicators with a low-risk classification. No malicious activity or attack patterns detected in observation history. Recommended classification for monitoring rather than blocking.

---

## Technical Profile

Infrastructure:

• Provider: Contabo (CloudCompute)
• Network Role: Single-Service Host
• ASN: 51167
• BGP Prefix: 164.68.124.0/23
• Route Stability: Unstable (isRouteStable: false)

Geolocation:

• Country: Germany (DE)
• Region: Grand Est
• City: Lauterbourg
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin

DNS Resolution:

• Forward Hostname: vmi3300870.contaboserver.net
• PTR Record: vmi3300870.contaboserver.net
• Forward Confirmed: Yes
• Email Authentication: SPF/DMARC not configured

---

## Threat Indicators

Current Threat Assessment:

• Reputation: Low Risk
• Abuse Confidence Score: Not Available
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None

Blacklist Status:

• DNSBL Lists Listed: 1 of 8
• Total Abuse Confidence: Low

Network Classification Flags:

• Cloud Infrastructure: Yes
• CDN: No
• VPN/Proxy: No
• Hosting: Yes
• Residential: No
• Bogon: No

---

## Service Exposure

Open Services Detected:

• Port 22/TCP: SSH (OpenSSH_9.6p1 Ubuntu-3ubuntu13.16)

Web Services:

• HTTP Title: None
• TLS Certificate: Not Present

---

## Neighborhood Analysis

Subnet: 164.68.124.190/24

• Abuse Density: 1 (mostly_clean)
• Inherited Risk: 5/100
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 2

Adjacent IP Assessment:

• 164.68.124.118: Risk Score 25, Authority Score 60

---

## Observation History

Signal Count: 22 observations tracked

Temporal Analysis:

• Recent observations (June 2026) show consistent minimal risk signals
• Ownership changes: None detected
• Threat persistence days: 0
• Is persistently malicious: No

Signal Types Observed:

• Network classification signals
• Geolocation inference signals
• Provider identification signals
• Minimal threat indicator signals

---

## Relationship Graph

Key Associations (58 relationships):

• Contabo Network: Multiple "Same Network" links
• DNS Hostnames: vmi3300870.contaboserver.net (DNS Association)
• Network Infrastructure: Contabo cloud provider relationships

---

## Recommended Security Actions

Firewall/Blocking Decision:

• Action: Monitor / Allow with logging
• Risk Justification: Low risk score (25/100), no malicious indicators, legitimate cloud provider infrastructure

Actionable Rules:

• No blocking recommended based on current risk profile
• Consider rate limiting on SSH port 22 if exposing to internet
• Monitor for unusual outbound connections

---

## Intelligence Conclusions

IP 164.68.124.190 represents a legitimate Contabo cloud computing endpoint with no evidence of malicious activity. The low risk score, clean neighborhood context, and absence of threat indicators support classification as benign infrastructure. No immediate action required beyond standard monitoring practices.

Threat Level: LOW

Recommended Disposition: ALLOW (with monitoring)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.