194.163.191.200
INTELLIGENCE BRIEFING: IP 194.163.191.200
Assessment Date: 2026-08-06
Risk Level: Low (Score: 30/100)
---
EXECUTIVE SUMMARY
IP 194.163.191.200 is a low-risk residential cloud infrastructure endpoint registered to Contabo (AS51167). The address operates as a virtual private server (VPS) with standard web services and no observed malicious activity. No blacklist listings or threat indicators were identified.
---
NETWORK INFRASTRUCTURE
* Provider: Contabo (AS51167)
* Organization: Johannes Selg (CONTABO)
* CIDR Block: 194.163.160.0/19
* Geolocation: Lauterbourg, France (FR)
* Infrastructure Type: Cloud Compute (Contabo Hosting)
* BGP Prefix: 194.163.128.0/18
---
DNS AND HOSTNAME ANALYSIS
* PTR Record: vmi2407998.contaboserver.net
* Forward Resolution: Forward confirmed (1 hostname)
* Associated Hostnames: vmi2407998.contaboserver.net (repeated relationship entries)
* Domain: contaboserver.net
---
SERVICE AND CERTIFICATE PROFILE
* Open Ports:
* TCP/80 (HTTP)
* TCP/443 (HTTPS)
* TCP/22 (SSH – OpenSSH_9.6p1 Ubuntu-3ubuntu13.18)
* TCP/8080 (HTTP-Alt)
* TCP/8443 (HTTPS-Alt)
* Server Software: Caddy
* TLS Certificate:
* Issuer: Arcadia Technology, LLC (Indiana, US)
* Subject: E=info@arcadiatech.org, CN=2941f9d6156f, OU=Crafty Controller
* Status: Self-signed: No
---
THREAT INDICATORS AND OBSERVATIONS
* Abuse Confidence Score: Not reported
* Blacklist Status: Not listed (0 entries across 8 DNSBLs)
* Known Campaigns: None observed
* Tor Exit Node: No
* Known Attacker: No
* Spam Source: No
---
TEMPORAL ANALYSIS
* Observation Count: 18 signals recorded
* Recent Activity: 2026-08-06
* Observed Signals:
* Connection failures (HTTPS)
* RIR/organizational resolution (Ripe, Johannes Selg)
* Geographic inconsistencies reported (FR, DE, US) with low-to-moderate confidence
* Certificate extraction (Arcadia Technology, LLC)
---
NEIGHBORHOOD ANALYSIS
* Subnet: 194.163.191.0/24
* Neighbor Count: 0
* Abuse Density: 0
* Threat Siblings: 0
* Risk Classification: No inherited risk from subnet
---
RECOMMENDATIONS
* Classification: Standard cloud hosting endpoint. No immediate defensive action required.
* Monitoring: Continue baseline monitoring for service anomalies.
* Firewall Rules: No blocking recommended; standard web traffic patterns observed.
* Certification Note: TLS certificate issued by US entity (Arcadia Technology, LLC) for French-based infrastructure. Verify business justification if this relationship is unexpected for organizational policy.
---
INTELLEIGENCE CONCLUSION
The IP address represents a legitimate Contabo cloud compute resource with no malicious indicators. The TLS certificate association with Arcadia Technology, LLC warrants contextual verification but does not constitute a direct threat indicator. Standard monitoring protocols are appropriate.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | CONTABO |
| CIDR Block | 194.163.160.0/19 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vmi2407998.contaboserver.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vmi2407998.contaboserver.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| 8080 | http-alt | tcp | — |
| 8443 | https-alt | tcp | — |
| Closed Ports | 25, 3389 (5 open / 7 scanned) | ||
| Server | Caddy |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
| SANs | 2941f9d6156f*.2941f9d6156flocalhost*.localhost*.local127.0.0.1 |
| Valid From | 2026-03-06T22:33:57+00:00 |
| Valid Until | 2027-03-06T22:33:57+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 7D |
| Thumbprint | B037B8136E99CB01EE8C36BCB62AF63CDC82262D |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 35% | 2 | 3 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 29% | 10 | 15 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims US but primary geo says DE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-03 23:38:47 UTC |
| Last Seen | 2026-08-13 05:39:03 UTC |
| Profile Built | 2026-08-13 05:52:39 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.