185.194.219.72📋 Copy

IP Intelligence Briefing: 185.194.219.72

Date: June 6, 2026

---

**1. Risk Profile**

• Risk Score: 25 (Low Risk)
• Provider: Contabo (CloudCompute)
• Ownership: Registered to *Johannes Selg* (ASN 51167).
• Geolocation: Germany (DE), Lauterbourg, Grand Est region. Coordinates: 51.17°N, 10.45°E.
• Network Role: Hosting provider (Contabo) with no evidence of VPN, Tor, or residential traffic.

---

**2. Threat Indicators**

• No malicious activity detected: No indicators of spam, abuse, or known attacker campaigns.
• TLS Certificate: Valid, issued to *crm.naturalljuice.com* (Let’s Encrypt).
• Services:

- HTTP/HTTPS (port 80/443) with Nginx server banner.

- SSH (port 22) using OpenSSH 10.0p2.

• DNS: PTR hostname *ip-72-219-194-185.static.contabo.net* resolved to *contabo.net*.

---

**3. Observation History**

• Stability: No significant changes in risk signals over the past 30 days.
• Geolocation Consistency: Plausible location with RTT (Round-Trip Time) of 110ms.
• Network Activity: Static IP with no dynamic changes.

---

**4. Network Relationships**

• Subnet: 185.194.219.72/24.
• Neighbors: No active or threatening sibling IPs in the subnet.
• Shared Networks: Linked to *TT-2021101304* (same network identifier).

---

**5. Recommendations**

• Monitor: Track SSH access and TLS certificate validity, as the server is publicly accessible.
• Firewall: Allow traffic on ports 80, 443, and 22 with rate limiting to mitigate brute-force attempts.
• Verify: Confirm ownership with Contabo to ensure no unauthorized use of the IP.

---

Conclusion: This IP is a legitimate cloud server with no current threat indicators. Regular monitoring is advised to ensure compliance and security posture.

Source: IPDebrief Threat Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.