5.189.138.45📋 Copy

IP Intelligence Briefing: 5.189.138.45

Date: 2026-06-08

---

**Risk Assessment**

• Overall Risk Score: Low (25/100)
• Threat Indicators: No malicious indicators, spam, or known attacker associations.
• Network Stability: Stable with no recent route changes.
• DNS Security: DNSSEC valid, no CAA records, and no DNSBL listings.

---

**Ownership & Geolocation**

• Registrar: Johannes Selg (ASN 51167, Contabo).
• Location: Lauterbourg, Grand Est, Germany (51.17°N, 10.45°E).
• Infrastructure: CloudCompute server hosted by Contabo, classified as a web server.

---

**Network & Services**

• Open Ports: HTTP (80), HTTPS (443), SSH (22).
• SSH Banner: `SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16`.
• Web Server: Nginx/1.24.0 (Ubuntu) with no HTTP title.
• TLS Certificate: Issued to `stoxbyte.org` (Let’s Encrypt), valid for HTTPS.

---

**Observation History**

• Recent Activity: No significant changes in geolocation, DNS, or threat signals over the last 30 days.
• Consistency: Stable ownership and network role since registration.

---

**Relationships & Subnet Context**

• DNS Associations: Linked to `vmi3276531.contaboserver.net` (Contabo).
• Subnet: `5.189.138.45/24` with low abuse density (1/256 IPs flagged).
• Neighbors:

- 5.189.138.17: Risk score 25 (higher than average).

- Subnet classification: mostly_clean, but monitor neighbor with elevated risk.

---

**Actionable Recommendations**

1. Monitor Subnet: Track activity on `5.189.138.17` due to higher risk score.

2. Verify DNS: Confirm ownership of `vmi3276531.contaboserver.net` to ensure no misconfigured services.

3. Check TLS: Validate certificate chain for `stoxbyte.org` to ensure no misissuance.

4. Baseline Behavior: Use historical data to establish normal traffic patterns for the CloudCompute instance.

---

Source: IPDebrief Threat Intelligence Platform.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.