75.119.129.198📋 Copy

IP Intelligence Briefing: 75.119.129.198

Date: 2026-06-13

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Registered to *Johannes Selg* under Contabo (AS51167).
• Geolocation: France (Paris), ARIN-registed.
• Network Role: Cloud compute instance hosted by Contabo (no public services detected).
• Threat Indicators: No malicious activity observed.

---

**2. Observation History**

• DNSBL Listing (High Severity): Confirmed via 14 observations (confidence: 0.85).
• DNS Records: Linked to `vmi2951751.contaboserver.net` (Contabo subdomain).
• BGP Data: Prefix `75.119.128.0/19` registered to Contabo (Germany).
• Email Security: No SPF/DKIM records detected.

---

**3. Relationships**

• DNS Association: Direct link to `vmi2951751.contaboserver.net`.
• Network Affiliation: Same subnet as Contabo (AS51167).

---

**4. Neighborhood Analysis**

• Subnet: `75.119.129.0/24` (1 neighbor).
• Neighbor Risk:

- 75.119.129.233: Risk score 25, authority score 60 (moderate risk).

• Subnet Abuse Density: 0% (no suspicious activity detected).

---

**5. Actionable Insights**

• Monitor DNSBL Listing: Verify if the high-severity listing is a false positive or indicative of spam activity.
• Subnet Surveillance: Track the neighboring IP (75.119.129.233) for potential lateral movement or shared infrastructure risks.
• Cloud Provider Context: Contabo is a legitimate cloud host, but ensure no misconfigured services are exposing the subnet.
• Email Security: Recommend implementing SPF/DKIM for `contaboserver.net` to mitigate email spoofing risks.

---

Conclusion:

The IP is a low-risk cloud server managed by Contabo in France. While no direct threats are detected, the DNSBL listing and a high-risk neighbor warrant further investigation. SOC teams should validate the DNSBL entry and monitor the subnet for anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.