195.179.228.8📋 Copy

IP Intelligence Briefing: 195.179.228.8

*Generated via IPDebrief tools*

---

**1. Profile Summary**

• Risk Score: 25 (Low Risk)
• Owner: Johannes Selg (ASN 51167, Contabo)
• Geolocation: Germany (DE), Sessa Aurunca, 51.17°N, 10.45°E
• Network Role: Web server (HTTP/HTTPS/SSH), hosted domains: `syzwn.my`, `emmett1.my`
• Threat Indicators: No malicious indicators, no blacklisted domains, no Tor/VPN/CDN associations

---

**2. Key Observations**

• DNS Configuration:

- Valid SPF records for `syzwn.my` and `emmett1.my`

- Partial DMARC configuration for `syzwn.my` (quarantine policy)

- No email spoofing risks detected

• Services:

- Open ports: 80 (HTTP), 443 (HTTPS), 22 (SSH)

- TLS certificate: Valid (Let’s Encrypt), SANs: `emmett1.my`

- Server banner: `lighttpd/1.4.82`

• Network Behavior:

- Stable infrastructure (Contabo provider)

- No recent route changes or abuse reports

---

**3. Temporal Trends**

• Observation History:

- Consistent DNS records since 2026-06-10

- No spikes in threat signals or anomalous activity

- Low operational risk (0 threat persistence days)

---

**4. Relationships & Neighborhood**

• Related Entities:

- Linked to `mail.syzwn.my` (DNS association)

- Same network: `TT-20240404` (likely a subnet identifier)

• Subnet Analysis:

- `/24` subnet (`195.179.228.0/24`)

- Abuse density: 0% (clean subnet)

- No malicious neighbors detected

---

**5. Security Recommendations**

• Firewall Actions: No immediate blocking recommended due to low risk.
• Monitoring:

- Track DNS records for `syzwn.my` and `emmett1.my` for configuration changes.

- Monitor SSH access logs for unauthorized attempts.

• Validation: Confirm ownership via RDAP (abuse contact available).

---

Conclusion: This IP hosts legitimate web services with proper DNS security configurations. No evidence of malicious activity detected. Continue standard monitoring for anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.