IPDebrief

185.205.244.119

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

INTELLIGENCE BRIEFING: 185.205.244.119/32

Classification: LOW RISK โ€” Cloud Infrastructure Asset

Date of Analysis: 2026-06-19

Risk Score: 25/100

---

**1. OVERVIEW & OWNERSHIP**

The IP address 185.205.244.119 is registered to Contabo (ASN: 51167) under the organization "Johannes Selg." The infrastructure is classified as cloud compute with a RIR registry of RIPE. The IP operates within the 185.205.244.0/24 CIDR block with a BGP prefix origin at ASN 51167.

**2. GEOLOCATION**

**3. NETWORK INFRASTRUCTURE**

**4. THREAT INDICATORS**

**5. TEMPORAL ANALYSIS**

**6. NETWORK NEIGHBORHOOD**

**7. RELATIONSHIP GRAPH**

**8. SECURITY ACTIONS & RECOMMENDATIONS**

No specific firewall or blocking actions are recommended. The IP presents a low-risk profile with no actionable threats requiring immediate remediation.

---

**INTELLIGENCE SUMMARY**

IP 185.205.244.119 is a low-risk Contabo cloud server located in Lauterbourg, Germany. The asset operates as a web server with HTTP/2 support and Traefik reverse proxy configuration. Key indicators include a single DNSBL listing, a 404 default response status, and a self-signed TLS certificate. The IP is not associated with known malicious campaigns or persistent threat activity. Neighborhood analysis reveals an abuse density of 0, indicating the broader subnet maintains a clean security posture. No blocking or filtering actions are warranted at this time; continued monitoring is sufficient.

---

Generated by IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
RegionGrand Est
CityLauterbourg
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

๐Ÿข Ownership & Registration

OrganizationJohannes Selg
ASNAS51167
Network Nameโ€”
CIDR Blockโ€”
RIRRIPE
Countryโ€”
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRvmi3153534.contaboserver.net
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesvmi3153534.contaboserver.net

๐Ÿ” DNS Hygiene

Hygiene Score40% (Fair)
SPF0/2 domains
DMARC0/2 domains
FCrDNSVerified
DNSSECValid
CAANot configured
Domains Checked2 domains

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting โ€” Infrastructure provider without advanced routing
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

A self-signed certificate was detected. This is common for development servers, internal services, or IoT devices.
โš ๏ธ
CN=TRAEFIK DEFAULT CERT
Issued by CN=TRAEFIK DEFAULT CERT
Self-signed: Yes
SANsffc3fbffbb421d4bad388f813767619f.6bf5d9fd354bcabde035764c57f945e8.traefik.default
Valid From2026-06-12T03:03:44+00:00
Valid Until2027-06-12T03:03:44+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_128_GCM_SHA256
Signature Algorithmsha256RSA
Validity Period365 days
Serial Number1DAF6AC8C1F97BE09814D9984C4B872B
ThumbprintC23B29E4AE3F78DBF00A1D8C8887F70DDBEE3FB4

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
32%
24
routing
13%
11
services
28%
23
ownership
20%
23
reputation
27%
13
geolocation
37%
23
Overall26%1017
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-08 17:17:48 UTC
Last Seen2026-06-27 13:41:57 UTC
Profile Built2026-06-28 07:46:33 UTC
Data FreshnessLive
Signal Types25
Total Observations32
๐Ÿ” 25 signal types ยท 32 observations collected
This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.