IPDebrief

185.185.80.174

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP Intelligence Briefing: 185.185.80.174

Date: 2026-06-10

---

**1. Core Profile**

- Open ports: HTTP (80), HTTPS (443), SSH (22)

- TLS Certificate: Valid (Let’s Encrypt, CN=alumframe.astraviamo.com)

- Server Banner: `nginx/1.24.0 (Ubuntu)`

---

**2. Threat Indicators**

- No indicators of spam, phishing, or known attacker activity.

- No DNSBL listings (1/8 total lists).

- No active threats in observation history (0 threat observations).

- SPF/DKIM/DMArc records detected for `astraviamo.com`.

- DNSSEC validation enabled.

---

**3. Network Relationships**

- Linked to `vmi2870637.contaboserver.net` (Contabo-hosted).

- Part of `185.185.80.0/24` (Contabo infrastructure).

- No suspicious peers or abuse density detected in subnet.

---

**4. Historical Observations**

- No recent changes in geolocation or network role.

- Persistent as a cloud-hosted server (no mobility detected).

- 302 redirect detected (potential misconfiguration or redirect chain).

- No HTTP vulnerabilities (e.g., HSTS, CSP).

---

**5. Recommendations**

- Track DNS records for `vmi2870637.contaboserver.net` for unexpected changes.

- Verify `astraviamo.com` domain security policies (SPF/DKIM) for email integrity.

- Allow standard ports (80, 443, 22) for legitimate web/SSH traffic.

- Block non-standard or suspicious ports if detected.

- Investigate `185.185.80.0/24` for potential lateral movement or shared infrastructure risks.

---

Conclusion:

This IP is a legitimate, low-risk web server hosted by Contabo. No immediate threat indicators are present, but ongoing monitoring is advised to detect anomalies in its network behavior or associated domains.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡©πŸ‡ͺ Germany
RegionGrand Est
CityLauterbourg
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

🏒 Ownership & Registration

OrganizationJohannes Selg
ASNAS51167
Network Nameβ€”
CIDR Blockβ€”
RIRRIPE
Countryβ€”
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRvmi2870637.contaboserver.net
Forward ConfirmedYes β€” FCrDNS verified
Forward Hostnamesvmi2870637.contaboserver.net

πŸ” DNS Hygiene

Hygiene Score80% (Excellent)
SPF1/2 domains
DMARC1/2 domains
FCrDNSVerified
DNSSECValid
CAANot configured
Domains Checked2 domains

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting β€” Infrastructure provider without advanced routing
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpβ€”
443httpstcpβ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Servernginx/1.24.0 (Ubuntu)
HTTP Titleβ€”
SSH VersionSSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16

πŸ” TLS Certificate

πŸ”’
CN=alumframe.astraviamo.com
Issued by CN=YE2, O=Let's Encrypt, C=US
Self-signed: No
SANsalumframe.astraviamo.com
Valid From2026-06-21T16:41:59+00:00
Valid Until2026-09-19T16:41:58+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha384ECDSA
Validity Period89 days
Serial Number05D9AE86CC5EEFBD013C10AFE6EC8085D916
Thumbprint02E25EAA3CEC7101BF1441DC06FF47151BA45352

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
24
routing
13%
11
services
37%
23
ownership
24%
23
reputation
26%
13
geolocation
25%
22
Overall25%1016
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-24 06:33:00 UTC
Last Seen2026-06-28 23:43:55 UTC
Profile Built2026-06-29 05:47:15 UTC
Data FreshnessLive
Signal Types21
Total Observations23
πŸ” 21 signal types Β· 23 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.