207.180.204.120📋 Copy

# IP Intelligence Briefing: 207.180.204.120

Classification: LOW RISK | Report Date: Current | Threat Level: Minimal

## Executive Summary

IP address 207.180.204.120 presents a low-risk profile with a risk score of 25. The address is classified as a cloud compute host operated by Contabo (ASN 51167) and resolves to the domain aguibou.be. No active threat campaigns, known attacker indicators, or spam source signatures were detected. The IP maintains stable ownership and shows no signs of persistent malicious activity.

## Infrastructure Profile

• Organization: Johannes Selg / CONTABO
• ASN: 51167
• CIDR Block: 207.180.192.0/19
• RIR: ARIN
• Infrastructure Type: Cloud Compute / Single-Service Host
• Service Purpose: Email/Hosting

## Geolocation Data

• Country: Germany (DE)
• Region: Grand Est
• City: Lauterbourg
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin
• GeoValidation: Plausible (401.9km from claimed location, 5 probe count, average RTT 110.6ms)

## Network Services & Port Analysis

• Open Ports: TCP/22 (SSH)
• SSH Banner: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16
• TLS Certificate: None detected
• HTTP Title: None detected
• Email Authentication: SPF and DMARC records present

## DNS Intelligence

• PTR Hostnames: mail.aguibou.be
• Domain: aguibou.be
• Forward Resolution: Confirmed (1 hostname)
• DNSBL Listings: 1 of 8 total lists flagged

## Threat Indicators Assessment

## Network Neighborhood Analysis

• Subnet: 207.180.204.120/24
• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 1
• Threat Siblings: 0
• High/Medium Risk IPs: 0

## Relationship Graph

The IP maintains associations with:

• DNS Targets: mail.aguibou.be (multiple relationship entries)
• Network: CONTABO (multiple relationship entries)
• Total Relationships: 11

## Historical Observations

A total of 22 observations recorded since initial analysis:

• Latest (2026-06-21): Subnet classification "clean," abuse density 0%
• 2026-06-16: No banners detected, campaign likelihood "none"
• 2026-06-16: SSH service detected, ports scanned
• 2026-06-16: Geolocation validated as plausible
• 2026-06-16: Ownership stable (0 changes), no persistent malicious behavior detected

## Control Plane Intelligence

• Origin ASN: 51167
• BGP Prefix: 207.180.204.0/23
• Route Stability: False
• RPKI State: Not applicable
• IRR Consistency: Not applicable
• Operator Score: 0.2609 (Basic)

## Risk Assessment

Overall Risk Score: 25/100 (LOW)

The IP demonstrates characteristics consistent with legitimate cloud hosting infrastructure. The absence of threat indicators, combined with clean neighborhood classification and stable ownership, supports a low-risk classification. The single DNSBL listing suggests minor reputation concerns that do not correlate with active malicious campaigns.

## Recommended Actions

No specific firewall rules or mitigation actions are recommended at this time. The IP does not meet the threshold for automated blocking based on current threat intelligence.

Monitoring Recommendation: Continue passive monitoring. No immediate action required.

---

*Report generated using IPDebrief intelligence platform. All data sourced from live intelligence feeds and historical observation records.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.