185.202.223.106📋 Copy

# IP Intelligence Briefing: 185.202.223.106/32

Classification: Cloud Computing Infrastructure (Low Risk)

Report Date: 2026-06-19

Risk Score: 25 / 100 (Low Risk)

## Executive Summary

IP address 185.202.223.106 is a Contabo cloud hosting VPS located in Germany. The IP exhibits low-risk characteristics with no active threat indicators. While the subnet shows moderate abuse density (0.5), this specific address maintains a clean profile.

## Technical Profile

Network Identity:

• ASN: 51167 (Contabo)
• Organization: Johannes Selg
• CIDR Block: 185.202.223.0/24
• Infrastructure Type: CloudCompute, Hosting

Geolocation:

• Country: Germany (DE)
• Region: Grand Est
• City: Lauterbourg
• Coordinates: 51.17°N, 10.45°E

DNS Resolution:

• PTR Record: vmi2895726.contaboserver.net
• Forward Resolution: vmi2895726.contaboserver.net
• Forward Confirmed: Yes

Open Services:

TLS Certificate:

• Issuer: CN=TRAEFIK DEFAULT CERT
• Subject: CN=TRAEFIK DEFAULT CERT
• Status: Self-signed certificate detected

## Threat Assessment

Threat Indicators: None

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists

Network Role Classification:

• Cloud Infrastructure: Yes
• CDN: No
• VPN/Proxy: No
• Tor Network: No
• Mobile/Residential: No

## Neighborhood Analysis (185.202.223.0/24)

• Abuse Density: 0.5 (50%)
• Classification: Mostly Clean
• Active Siblings: 2
• Threat Siblings: 1
• Neighbor IP: 185.202.223.202 (Risk Score: 25, Authority Score: 60)

The subnet exhibits moderate abuse density but the target IP maintains a low-risk profile with a risk score of 25.

## Observation History

Total Observations: 23 signals recorded

Recent Activity:

• 2026-06-19T05:54:51: HTTP response (Status 503 - Service Unavailable), HTTP/2 enabled, SSL/TLS in use
• 2026-06-14T14:03:44: Subnet classification "mostly_clean" with abuse density 0.5
• 2026-06-14T14:00:40: Provider identification: Contabo

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: No

## Relationship Graph

Total Relationships: 62

• Same Network associations
• DNS Associations: vmi2895726.contaboserver.net

## Security Recommendations

Current Risk Score: 25 (Low Risk)

Assessment: No immediate blocking action recommended. The IP represents standard cloud hosting infrastructure.

Monitoring Considerations:

1. The SSH service on port 22 should be monitored for unauthorized access attempts

2. Self-signed TLS certificate may indicate less rigorous security practices

3. Occasional HTTP 503 responses suggest service instability—verify if expected

Firewall Rules: Not applicable based on current risk profile

## Conclusion

IP 185.202.223.106 represents a legitimate Contabo cloud VPS with no active malicious indicators. The low risk score, lack of blacklist presence, and clean threat profile indicate this is not a threat actor infrastructure. Standard monitoring is appropriate; no immediate defensive action required.

---

*Intelligence compiled via IPDebrief API*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.