# 62.84.185.11 — IP Intelligence Summary 62.84.185.11 is an IPv4 address operated by Johannes Selg (AS51167), geolocated to Shrewsbury, Germany. It belongs to datacenter or hosting infrastructure with reverse DNS name mail.bilgitasarim.com. As of October 5, 2026, IPDebrief rates it Low Risk (30/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/62.84.185.11 - Last updated: 2026-10-05 ## Ownership - Organization: Johannes Selg - Network name: TT-20240627 - Allocated block: 62.84.176.0/20 - ASN: AS51167 (https://ipdebrief.com/asn/51167) - Regional registry: RIPE - Cloud / hosting provider: Contabo ## Location - City: Shrewsbury - Region: ENG - Country: Germany - Time zone: Europe/Berlin ## Network classification - Infrastructure type: CloudCompute - Datacenter / hosting: yes - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (30/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - mail.bilgitasarim.com - Forward-confirmed: no ## Exposed services - 80/tcp — http - 443/tcp — https - 22/tcp — ssh - 8443/tcp — https-alt ## Analyst narrative \# THREAT INTELLIGENCE BRIEFING **Target IP:** 62.84.185.11 **Classification:** Low Risk / Cloud Infrastructure **Risk Score:** 30/100 **Date:** Analysis completed on 2024-08-11 \--- \## EXECUTIVE SUMMARY IP 62.84.185.11 operates as a cloud-hosted web server on the Contabo provider network (ASN 51167). The address exhibits a low-risk profile with no active threat indicators, no known malware associations, and no blacklist listings. The IP hosts legitimate email and web services for multiple Turkish domain entities with standard security configurations in place. \--- \## INFRASTRUCTURE PROFILE | Attribute | Value | |-----------|-------| | **Organization** | Johannes Selg / Contabo | | **Network Block** | 62.84.176.0/20 | | **Country** | DE (Germany) | | **City** | Shrewsbury | | **Infrastructure Type** | Cloud Compute (Contabo) | | **Network Classification** | Hosting/Web Server | \### Open Services \- **Port 22/TCP:** SSH (OpenSSH 8.9p1 Ubuntu) \- **Port 80/TCP:** HTTP/2 \- **Port 443/TCP:** HTTPS \- **Port 8443/TCP:** HTTPS-Alt \### Server Fingerprint \- **Web Server:** nginx \- **TLS Certificate:** Let's Encrypt (issuer: CN=YR2, O=Let's Encrypt, C=US) \- **Certificate Subject:** server.istanbulses.com \--- \## DOMAIN ASSOCIATIONS | Domain | Role | Security Controls | |--------|------|-------------------| | bilgitasarim.com | Primary | SPF: Yes, DMARC: Yes (p=quarantine) | | istanbulses.com | TLS Subject | SPF: Yes, DMARC: Yes (p=quarantine) | **DNS Record:** mail.bilgitasarim.com (reverse DNS confirmed) \--- \## THREAT ASSESSMENT \### Current Risk Indicators \- **Abuse Confidence Score:** Not applicable \- **Known Attacker:** False \- **Spam Source:** False \- **Tor Exit Node:** False \- **Blacklist Count:** 0 \- **Known Campaigns:** None detected \### Control Plane Analysis \- **Route Stability:** Stable (no route changes in 30 days) \- **DNSSEC Valid:** True \- **RPKI State:** Not evaluated \- **Operator Score:** 0.1304 (Minimal) \- **DNSBL Listings:** 8 total lists (control plane data) \--- \## HISTORICAL OBSERVATIONS \- **Total Observations:** 28 signals \- **Threat Persistence:** None detected \- **Ownership Stability:** No ownership changes recorded \- **Recent Activity (2024-08-11):** \- Email authentication records confirmed for bilgitasarim.com and istanbulses.com \- HTTP/2 enabled with TLS 1.3 support \- Security headers present (X-Frame-Options: SAMEORIGIN, Content-Security-Policy absent) \- HSTS not enabled \- Robots.txt configured to disallow all access \--- \## NEIGHBORHOOD ANALYSIS (62.84.185.0/24) \- **Subnet Abuse Density:** 0.125 (Low) \- **Total Siblings:** 8 active IPs \- **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 3 \- Low Risk: 4 \- **Inherited Risk:** 2 (minimal) **Notable Neighbors:** | IP | Risk Score | Authority Score | |----|------------|-----------------| | 62.84.185.52 | 25 | 60 | | 62.84.185.55 | 50 | 60 | | 62.84.185.56 | 50 | 60 | | 62.84.185.60 | 25 | 60 | | 62.84.185.63 | 50 | 60 | | 62.84.185.67 | 25 | 60 | | 62.84.185.69 | 0 | 60 | \--- \## SECURITY ACTIONS RECOMMENDATION **No immediate firewall or blocking actions recommended.** The IP presents as a legitimate cloud-hosted web server with standard infrastructure. \### Monitoring Suggestions \- Monitor for changes in DNS resolution or service availability \- Track for any new threat indicator associations \- Be aware of the 3 medium-risk neighbors in the /24 subnet for contextual threat correlation \--- \## CONCLUSION IP 62.84.185.11 is classified as **Low Risk** and operates as a legitimate cloud web hosting endpoint. The infrastructure shows proper security configurations including SPF and DMARC records for associated email domains. No actionable threat intelligence indicates this IP should be flagged for blocking or investigation. Standard monitoring protocols are sufficient for continued observation. **Analyst Notes:** The combination of Turkish domain associations (bilgitasarim.com, istanbulses.com) with German geolocation data suggests typical cloud hosting patterns. The Contabo provider is known for VPS/reseller hosting services. ## Nearby addresses - 62.84.185.52 (https://ipdebrief.com/62.84.185.52) - 62.84.185.55 (https://ipdebrief.com/62.84.185.55) - 62.84.185.56 (https://ipdebrief.com/62.84.185.56) - 62.84.185.60 (https://ipdebrief.com/62.84.185.60) - 62.84.185.63 (https://ipdebrief.com/62.84.185.63) - 62.84.185.67 (https://ipdebrief.com/62.84.185.67) - 62.84.185.69 (https://ipdebrief.com/62.84.185.69) --- Source: IPDebrief, "62.84.185.11 IP intelligence", https://ipdebrief.com/62.84.185.11, updated 2026-10-05. Assessments are probabilistic.