194.163.164.244
Threat Intelligence Briefing for IP 194.163.164.244/32
Summary
The IP address 194.163.164.244/32 is associated with Contabo, a cloud hosting provider, and is geolocated to Munich, Germany. It is classified as Low Risk with a risk score of 25, indicating minimal immediate threat. No malicious indicators, spam, or known attacker activity were detected.
Key Findings
1. Ownership & Infrastructure
- Owned by Johannes Selg under Contabo (ASN 51167).
- Hosted as a CloudCompute instance with no exposed services (open ports) or TLS certificates.
- DNS resolves to vmi3323062.contaboserver.net, but no email authentication records (SPF/DKIM) were found.
2. Network Behavior
- Subnet 194.163.164.244/24 has an abuse density of 1 (mostly clean), with 1 active sibling IP (194.163.164.84) and 0 threat siblings.
- No BGP anomalies, route stability, or DNSSEC violations detected.
3. Threat Observations
- No malicious campaigns, blacklists, or Tor exit nodes linked.
- Historical data shows 1 threat observation with low confidence (0.85), but no persistent malicious activity.
4. Relationships
- Strong DNS associations with vmi3323062.contaboserver.net.
- No connections to other networks, organizations, or certificates.
Recommendations
- Monitor for unusual DNS resolution or subnet activity, as the IP’s history is limited.
- No immediate firewall rules or actions required due to low risk.
- Verify if the cloud instance is actively used, given the lack of service exposure.
Conclusion
This IP is likely a dormant or low-activity cloud server. No signs of compromise or malicious intent are present. Continue routine monitoring for anomalies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | CONTABO |
| CIDR Block | 194.163.160.0/19 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vmi3323062.contaboserver.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vmi3323062.contaboserver.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2026-05-27T21:28:51+00:00 |
| Valid Until | 2036-05-24T21:28:51+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 3650 days |
| Serial Number | 6A71E2B59BB2ECD99D61607E0F04EE566C893821 |
| Thumbprint | DCCFEB46F6C55E451EA096540BEC5701E0367EE3 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 24% | 2 | 3 |
| services | 24% | 2 | 3 |
| ownership | 35% | 3 | 5 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 12 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-28 00:16:21 UTC |
| Last Seen | 2026-06-29 04:56:21 UTC |
| Profile Built | 2026-06-29 05:00:40 UTC |
| Data Freshness | Live |
| Signal Types | 28 |
| Total Observations | 30 |
Full dossier details are available via our API.