178.238.224.113📋 Copy

# IP INTELLIGENCE BRIEFING: 178.238.224.113/32

## Executive Summary

Target IP 178.238.224.113 is classified as Low Risk with a risk score of 25. The address is associated with Contabo cloud infrastructure (ASN 51167, Organization: Johannes Selg) located in Lauterbourg, Grand Est, Germany. No active threat indicators, campaigns, or malicious activity have been observed across multiple data sources.

---

## Risk Profile

• Risk Score: 25/100 (Low)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: None
• Blacklist Status: 0 blacklist entries
• Classification: Single-Service Host / Cloud Infrastructure

---

## Technical Profile

• ASN: 51167 (Contabo)
• Geolocation: Germany (DE), Grand Est, Lauterbourg
• Coordinates: 51.17°N, 10.45°E
• DNS: vmi3258657.contaboserver.net (forward confirmed)
• Open Services: TCP/22 (SSH - OpenSSH_10.2p1 Ubuntu-2ubuntu3.2)
• Infrastructure Type: CloudCompute
• Network Role: VPS/Cloud Instance

---

## Threat Indicators

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Active Campaigns: None
• Threat Feeds: None matched
• TLS Certificate: None detected
• HTTP Title: None detected

---

## Control Plane & Routing

• BGP Prefix: 178.238.224.0/23
• Route Stability: Unstable
• RPKI State: Not verified
• DNSSEC: Valid
• DNSBL Listings: 1/8 lists
• Operator Score: 0.2609 (Basic)

---

## Neighborhood Analysis (/24: 178.238.224.0/24)

• Subnet Classification: Clean
• Abuse Density: 0
• Total Siblings: 4
• Active Siblings: 3
• Threat Siblings: 0
• Neighbor Risk Scores: All low-risk (25-30)

---

## Historical Observations

• Total Observations: 19
• Latest Observation: 2026-06-14T13:18:35Z
• Threat Persistence: 0 days
• Ownership Changes: 0
• Signal Timeline:

- 2026-06-05: Subnet classified as clean, no abuse density

- 2026-05-31: Geographic validation confirmed (plausible RTT: 107-116ms)

- 2026-06-14: Cloud infrastructure classification confirmed

No escalation of threat indicators detected over observation period.

---

## Recommended Security Actions

No immediate actions required. The IP presents minimal threat posture. If additional context or threat intelligence suggests otherwise, consider:

• Standard firewall rules for SSH port 22 (already in place)
• Monitor for any changes in DNS resolution or service banners
• No firewall rules or WAF recommendations generated based on current risk profile

---

## Related Entities

• Hostname: vmi3258657.contaboserver.net
• Network: CONTABO
• Certificate Associations: None

---

BRIEFING COMPLETE — Target IP 178.238.224.113/32 shows no indicators of malicious activity and is consistent with legitimate cloud hosting infrastructure. SOC analysts may treat as low-priority or whitelist based on operational requirements.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.