# IP Intelligence Briefing: 169.58.54.38/32
Classification: Low Risk | Provider: Contabo (CloudCompute) | Country: DE
## Executive Summary
IP 169.58.54.38 is a Contabo cloud hosting infrastructure asset operating within the 169.58.0.0/17 CIDR block. The IP registers with a low-risk profile (Risk Score: 0) and demonstrates minimal threat indicators. No active blacklist listings or known campaign associations were identified.
## Network Ownership and Infrastructure
- ASN: AS51167
- Organization: Johannes Selg
- Network Block: 169.58.0.0/17 (TT-20260630)
- Infrastructure Type: Cloud Compute (Contabo)
- Registration RIR: ARIN
The IP resolves to a single virtual machine instance (vmi3456327.contaboserver.net) with standard SSH access (port 22/tcp). DNS records confirm forward resolution to the Contabo-hosted domain with verified reverse DNS mapping.
## Threat Indicators
- Blacklist Status: Clean (0 blacklist hits)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Abuse Confidence: Not scored
- Threat Observations: 1 historical observation recorded
- Campaign Likelihood: None
## Observed Risk Profile
Risk assessment remains at baseline levels with a Risk Score of 0. Provider and authority scores both register at 0, indicating standard cloud hosting operation without elevated threat characteristics. The IP exhibits no persistent malicious behavior patterns.
## Geographic Context
The IP is associated with Germany (DE) with geographic consensus from multiple sources. Operator score registers at 0.2609 (Basic classification). One historical observation showed US geolocation data, suggesting potential IP-based service routing rather than physical location.
## Neighborhood Analysis
The /24 subnet (169.58.54.0/24) demonstrates mostly clean classification with low abuse density. No adjacent threat activity detected within the immediate IP neighborhood. The subnet shows 1 total sibling IP with 1 active and 1 threat sibling reported in historical data.
## Historical Observation Timeline
23 signal observations recorded through August 2026. Most recent activity shows:
- Ownership stability maintained (0 changes)
- Threat persistence: 0 days
- Is persistently malicious: False
- Operator score consistent at 0.2609
## Related Entities
- Primary Hostname: vmi3456327.contaboserver.net
- Network Block: TT-20260630
- Multiple DNS and network association relationships confirmed
## Recommended Actions
No immediate blocking or mitigation actions required. Standard monitoring practices apply. The IP demonstrates characteristics of legitimate cloud hosting infrastructure without evidence of malicious activity.
Generated: Current timestamp
Data Sources: IPDebrief Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | TT-20260630 |
| CIDR Block | 169.58.0.0/17 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vmi3456327.contaboserver.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vmi3456327.contaboserver.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 13% | 1 | 1 |
| Overall | 22% | 9 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-23 13:56:25 UTC |
| Last Seen | 2026-08-12 17:41:15 UTC |
| Profile Built | 2026-08-12 17:49:01 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.