75.119.135.90
IP INTELLIGENCE BRIEFING: 75.119.135.90/32
---
EXECUTIVE SUMMARY
IP address 75.119.135.90 is a low-risk cloud hosting endpoint operated by Contabo (ASN 51167) in Düsseldorf, Germany. The IP serves as a web server hosting a Let's Encrypt-certified domain associated with agilityglobal.net. Current risk assessment scores 25/100 with no active threat indicators.
---
NETWORK IDENTIFICATION
- IP Address: 75.119.135.90/32
- Organization: Contabo (ASN 51167)
- Registrant: Johannes Selg
- Location: Düsseldorf, Germany (DE) - NW Region
- Infrastructure Type: CloudCompute/Hosting
- CIDR Block: 75.119.128.0/19
---
SERVICE PROFILE
- Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS)
- Web Server: nginx/1.18.0 (Ubuntu)
- Reverse DNS: vmi576879.contaboserver.net
- TLS Certificate: Issued by Let's Encrypt for alkhalilierp.agilityglobal.net
- DNS Configuration: SPF and DMARC records present for agilityglobal.net
---
THREAT ASSESSMENT
- Risk Score: 25 (Low Risk)
- Reputation: Low Risk
- Blacklist Status: 0 active blacklists
- DNSBL Listings: 1 out of 8 total lists (dnsblListedCount)
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
---
NEIGHBORHOOD ANALYSIS
- Subnet: 75.119.135.90/24
- Abuse Density: 1 (moderate)
- Classification: mostly_clean
- Threat Siblings: 1
- Active Siblings: 1
- Total Siblings: 1
---
NETWORK RELATIONSHIPS
- Network Association: CONTABO (cloud hosting provider)
- DNS Associations: vmi576879.contaboserver.net
- BGP Route Stability: Route changes observed in last 30 days
---
OBSERVATION HISTORY
- Total Observations: 23 signals recorded
- Recent Activity: Active signals observed as of 2026-06-18
- Signal Types: HTTP response headers, DNS records, operator scoring, geolocation
- Persistence: Threat persistence days: 0 (not persistently malicious)
---
RECOMMENDED ACTIONS
- Classification: Monitor as low-risk cloud hosting infrastructure
- Firewall Rules: No immediate blocking required
- Monitoring Priority: Low
- Investigation Trigger: Route instability (isRouteStable: false) warrants periodic re-assessment
---
ANALYST NOTES
The IP represents standard cloud hosting infrastructure with legitimate domain ownership. The single DNSBL listing warrants periodic review but does not indicate active malicious behavior. The presence of SPF/DMARC records for agilityglobal.net suggests proper email authentication configuration. Network route instability may indicate dynamic infrastructure provisioning typical of cloud hosting environments.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vmi576879.contaboserver.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vmi576879.contaboserver.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 1/2 domains |
| DMARC | 1/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | nginx/1.18.0 (Ubuntu) |
| HTTP Title | — |
🔐 TLS Certificate
CN=alkhalilierp.agilityglobal.net was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | alkhalilierp.agilityglobal.net |
| Valid From | 2025-01-29T19:31:45+00:00 |
| Valid Until | 2025-04-29T19:31:44+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 04F9A78C0914A163A85D94409EA8599CF61C |
| Thumbprint | FC57E88810F809B442572D0CA53A39998401EEB0 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 20% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 21% | 2 | 2 |
| Overall | 23% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:04:34 UTC |
| Last Seen | 2026-06-27 09:28:04 UTC |
| Profile Built | 2026-06-28 03:34:26 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 29 |
Full dossier details are available via our API.