IP Intelligence Briefing: 194.146.13.166
Date: 2026-06-07
---
**1. Core Profile**
- Risk Score: 0 (Low Risk)
- Provider: Contabo (Cloud Hosting)
- Ownership: Johannes Selg (ASN 51167, RIPE)
- Geolocation: Lauterbourg, Grand Est, Germany (51.17°N, 10.45°E)
- Network Role: CloudCompute server (Hosting, HTTP/HTTPS, SSH)
- Services:
- Open ports: 80 (HTTP), 443 (HTTPS), 22 (SSH)
- TLS Certificate: Issued to `api.signal.iplinseparable.com` (Letβs Encrypt)
- Server Banner: `nginx/1.24.0 (Ubuntu)`
---
**2. Threat Indicators**
- No malicious activity detected:
- No known attacker, spam, or Tor exit node associations.
- Zero blacklist listings, threat feeds, or campaign correlations.
- DNS Security:
- SPF/DKIM records present for `trading-pro-analytic.com` (SPF: `include:zohomail.eu`, DMARC: `reject`).
- No DNSBL listings.
---
**3. Observation History**
- Recent Activity (Last 30 Days):
- Stable network role (CloudHosting).
- DNS records linked to `contaboserver.net` and `iplinseparable.com`.
- No significant changes in risk scores or service configurations.
---
**4. Relationships & Network Context**
- DNS Associations:
- Resolves to `vmi2815088.contaboserver.net` (Contabo managed server).
- Subnet:
- Part of `194.146.13.0/24` (abuse density: 0.5, classified as "mostly_clean").
- One neighboring IP (`194.146.13.136`) with moderate authority score (60).
---
**5. Security Recommendations**
- No immediate action required:
- Low-risk profile with no malicious indicators.
- Firewall rules: No recommendations generated (see `ipdebrief_actions` for details).
- Monitoring:
- Track DNS and service changes, especially if new domains or ports are added.
- Monitor subnet neighbors for emerging risks.
---
Conclusion:
This IP is a legitimate Contabo-hosted cloud server with no current malicious activity. SOC teams should maintain standard monitoring practices but prioritize other high-risk assets. No immediate mitigation steps are required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | β |
| CIDR Block | β |
| RIR | RIPE |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | vmi2815088.contaboserver.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | vmi2815088.contaboserver.net |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 1/3 domains |
| DMARC | 1/3 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 3 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.24.0 (Ubuntu) |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
π TLS Certificate
| SANs | admin.trading-pro-analytic.comapi.signal.iplinseparable.comdevice.trading-pro-analytic.comgateway.trading-pro-analytic.commt5.trading-pro-analytic.comtrading-pro-analytic.comwww.trading-pro-analytic.com |
| Valid From | 2026-05-06T22:11:25+00:00 |
| Valid Until | 2026-08-04T22:11:24+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 056696701AE8EDBCEAC935EE9299926415A5 |
| Thumbprint | E689A8DFDC64DAFC242C5D5D40E1A70F5D679736 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 29% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 26% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 31% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 26% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-14 13:24:18 UTC |
| Last Seen | 2026-06-28 00:51:11 UTC |
| Profile Built | 2026-06-28 18:56:35 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 30 |
Full dossier details are available via our API.