185.252.234.202📋 Copy

IP Intelligence Briefing: 185.252.234.202

Date: 2026-06-06

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Registered to Johannes Selg (AS14292, Contabo).
• Geolocation: Germany (DE), Grand Est region, Lauterbourg (lat: 51.17, lon: 10.45).
• Network Role: Cloud compute instance (Contabo), firewalled with no public services.
• Threat Indicators: Clean; no malware, phishing, or exploit activity detected.

---

**2. Observation History**

• Recent Activity (2026-06-06):

- Minimal risk detected (signal score: 0.15).

- DNS resolution confirmed for vmi3205732.contaboserver.net.

- Traceroute failed due to ICMP blocking, preventing geo-validation.

• Long-Term Trends:

- No persistent malicious behavior; threat observation count: 1.

- Stability score: 0 (no historical instability flagged).

---

**3. Relationships & Associations**

• DNS: Linked to vmi3205732.contaboserver.net (Contabo hosting).
• Network: Part of TT-2021101312 subnet (same network as 185.252.234.202/24).
• No Known Campaigns: No correlation with known malicious campaigns or CAA/DNSSEC violations.

---

**4. Neighborhood Analysis**

• Subnet: 185.252.234.0/24.
• Abuse Density: 1 (low risk; "mostly_clean" classification).
• Neighbors: No active or threat-associated IPs in the subnet (0 siblings).

---

**5. Recommendations**

• Monitoring: No immediate action required.
• Firewall: Allow traffic to/from Contabo’s infrastructure if necessary.
• Validation: Confirm DNS resolution and network access if this IP is part of a critical service.

Conclusion: This IP is a low-risk cloud compute instance with no malicious activity detected. No action required unless new threats emerge.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.