IP Intelligence Briefing: 178.238.235.121
Date: 2026-06-11
---
**1. Risk Profile**
- Overall Risk: Moderate (50/100)
- Provider Score: 0 (No provider risk indicators)
- Authority Score: 0 (Not a known authoritative node)
- Stability: Unstable (route stability score: 0)
- Threat Indicators: No malicious activity detected (0 threats, 0 blacklists).
---
**2. Ownership & Network**
- ASN: 51167 (Contabo)
- Organization: Johannes Selg (Contabo)
- Geolocation:
- Country: France (FR)
- Region: Grand Est
- City: Lauterbourg
- Coordinates: 51.17° N, 10.45° E
- Network Role:
- Cloud Compute (Contabo)
- No CDN, VPN, or proxy indicators
- Hosting: True (virtual machine)
---
**3. Threat & Activity History**
- Observations (30 days):
- No malicious signals (0 threats, 0 spam, 0 Tor exit nodes).
- DNS resolution confirmed for `vmi3265434.contaboserver.net`.
- No TLS/HTTP services or open ports detected.
- Route stability: Unstable (0 route changes in 30 days).
---
**4. Relationships**
- DNS Associations:
- Linked to `vmi3265434.contaboserver.net` (Contabo).
- Network Affiliations:
- Subnet: `178.238.235.0/24` (Contabo).
- No cross-subnet threats or anomalies.
---
**5. Neighborhood Analysis**
- Subnet: `178.238.235.0/24`
- Abuse Density: 0% (clean subnet).
- Neighbors: No active IPs in subnet (0 siblings).
---
**6. Recommendations**
- Monitoring: Track for unexpected DNS changes or service exposure.
- Firewall: No immediate blocking required; monitor via existing rules.
- Context: Legitimate cloud instance with no malicious indicators.
---
Source: IPDebrief Threat Intelligence Platform | Last Updated: 2026-06-11
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | CONTABO |
| CIDR Block | 178.238.235.0/24 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vmi3265434.contaboserver.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vmi3265434.contaboserver.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 34% | 2 | 3 |
| Overall | 23% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-26 18:57:12 UTC |
| Last Seen | 2026-06-29 03:17:23 UTC |
| Profile Built | 2026-06-29 09:20:56 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
Full dossier details are available via our API.