IP Intelligence Briefing: 207.180.240.197
Date: 2026-06-15
---
**1. Profile Summary**
- Risk Score: 25 (Low Risk)
- Provider: Contabo (CloudCompute)
- Geolocation: Nuremberg, Bavaria, Germany (51.17°N, 10.45°E)
- Network Role: Hosting Web Server (Apache) with HTTP/HTTPS services.
- Ownership: Registered to Johannes Selg (ASN 51167).
- TLS Certificate: Valid Letβs Encrypt certificate for `vici.aa-sols.com` (SANs: `vici.aa-sols.com`).
---
**2. Threat & Abuse Indicators**
- Threat Score: 0 (No malicious indicators detected).
- DNS Records:
- PTR: `vmi3305968.contaboserver.net`
- SPF/DKIM: Valid SPF and DMARC records for `contaboserver.net` and `aa-sols.com`.
- Open Ports:
- Port 80 (HTTP) and 443 (HTTPS) open, serving Apache.
- Certificate Validity: No self-signed or expired certificates observed.
---
**3. Observation History**
- Recent Activity (June 2026):
- DNS resolution for `aa-sols.com` and `contaboserver.net` confirmed.
- HTTP service detected with Apache server banner.
- No anomalous traffic or scans observed.
- Stability: Route stability score indicates minimal network changes.
---
**4. Network Relationships**
- DNS Associations:
- Linked to `vmi3305968.contaboserver.net` (repeatedly).
- Network Peers:
- Subnet `207.180.240.0/23` (Contabo infrastructure).
- No malicious or high-risk neighboring IPs detected.
---
**5. Neighborhood Analysis**
- Subnet Abuse Density: 0% (clean subnet).
- Active Siblings: 1 (itself).
- No Threat Siblings: No malicious activity reported in the subnet.
---
**6. Recommended Actions**
- Monitor: Track changes in DNS records or service banners for drift.
- Verify: Confirm `aa-sols.com` and `contaboserver.net` domains are legitimate.
- Firewall Rules: No immediate blocking required; ensure standard security practices are in place.
---
Conclusion:
The IP 207.180.240.197 is a legitimate cloud-hosted web server with no malicious indicators. It is part of Contaboβs infrastructure and serves domains with valid security configurations. No actionable threats detected. Continue monitoring for behavioral changes.
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | vmi3305968.contaboserver.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | vmi3400040.contaboserver.net |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Apache |
| HTTP Title | β |
π TLS Certificate
| SANs | vici.aa-sols.com |
| Valid From | 2026-05-19T16:32:50+00:00 |
| Valid Until | 2026-08-17T16:32:49+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 066F7B22B72804BC9B910D27D755887D5A0B |
| Thumbprint | 8451B3EAB91D7C30799CBA696A9CB9C28BE442F1 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 22% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 25% | 2 | 4 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 29% | 2 | 2 |
| Overall | 23% | 10 | 17 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-18 09:24:22 UTC |
| Last Seen | 2026-06-28 07:05:14 UTC |
| Profile Built | 2026-06-29 07:11:17 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 29 |
Full dossier details are available via our API.