173.212.238.177📋 Copy

IP Intelligence Briefing: 173.212.238.177

*Generated via IPDebrief tools: profile, history, relationships, and neighborhood analysis*

---

**Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Owned by Johannes Selg (ASN 51167, Contabo)
• Geolocation: Nuremberg, Germany (51.17°N, 10.45°E)
• Network Role: CloudCompute instance (Contabo), no open ports/services detected
• Threat Indicators: No malicious activity, no known campaigns, no abuse confidence score

---

**Observation History**

• Recent Activity:

- June 14, 2026: Basic risk signal (score 0.3), stable geolocation, no threats.

- June 2, 2026: Subnet abuse density 0.67 (mostly clean), 2 active siblings with risk scores 50 and 25.

• Trend: No persistent malicious behavior; risk profile stable.

---

**Relationships**

• Network: Linked to Contabo (same ASN, infrastructure type: CloudCompute).
• DNS: Associated with vmi3209282.contaboserver.net (PTR confirmed).
• Subnet: Part of 173.212.238.0/24, with 3 total siblings (2 active, 2 flagged as risky).

---

**Neighborhood Analysis**

• Subnet: 173.212.238.0/24
• Risk Distribution:

- 1 high-risk neighbor (50)

- 1 low-risk neighbor (25)

• Abuse Density: 0.67 (mostly clean, but some risk in subnet).

---

**SOC Actionable Insights**

1. Monitor Subnet: The subnet contains a high-risk neighbor (173.212.238.152). Investigate potential lateral movement or shared infrastructure.

2. Verify Cloud Compute: Confirm Contabo’s cloud instance is legitimate; no open ports/services detected.

3. Check DNS: Ensure vmi3209282.contaboserver.net is not linked to malicious domains.

4. No Immediate Mitigation: No direct threats detected, but subnet risk warrants periodic re-evaluation.

---

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.