IP INTELLIGENCE BRIEFING: 75.119.152.103/32
Classification: Low Risk | Provider: Contabo | Location: Germany
Executive Summary
IP address 75.119.152.103 is a low-risk infrastructure address associated with CONTABO cloud hosting provider (ASN 51167, Organization: Johannes Selg). The IP resolved to virtual machine hostname vmi3196858.contaboserver.net with no active threat indicators. Risk score of 25 indicates minimal concern for defensive operations.
Ownership & Registration
- Organization: Johannes Selg
- Provider: CONTABO
- ASN: 51167
- CIDR Block: 75.119.144.0/20
- RIR: ARIN
Geolocation
- Country: Germany (DE)
- Coordinates: 51.17°N, 10.45°E
- Timezone: Europe/Berlin
- Geo Consensus: Confirmed across multiple sources
Network Role & Classification
- Infrastructure Type: Cloud Compute
- Status: Firewalled / No Services
- Open Ports: None detected
- TLS/HTTP Services: None active
- VPN/Proxy/Tor: Not classified
DNS Analysis
- PTR Record: vmi3196858.contaboserver.net
- Forward Resolution: Confirmed (1 hostname)
- Email Authentication: No SPF or DMARC records configured
- DNSBL Listings: 1 of 8 total lists
Threat Intelligence
- Risk Score: 25 (Low)
- Threat Indicators: None
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0
- Campaign Associations: None identified
Observation History
- Total Observations: 15 signals
- Recent Activity: 2026-08-13
- Ownership Changes: 0
- Threat Persistence: Not detected
- Persistent Malicious Activity: False
Neighborhood Analysis (75.119.152.0/24)
- Abuse Density: 0
- Total Siblings: 1
- Threat Siblings: 0
- Neighbor Risk Profile: 75.119.152.95 (Risk Score: 25)
Recommended Actions
No immediate security actions required. The IP exhibits normal cloud infrastructure characteristics with no malicious indicators. Standard cloud provider monitoring procedures apply. No firewall rules recommended based on current risk profile.
Analyst Notes
This IP represents a standard cloud hosting environment with typical Contabo characteristics. The absence of open services and threat indicators supports benign classification. Monitor for any changes in service availability or threat indicator emergence.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | CONTABO |
| CIDR Block | 75.119.144.0/20 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vmi3196858.contaboserver.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vmi3196858.contaboserver.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 0/4 domains |
| DMARC | 0/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 4 domains |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | shop.orcollate.xyzwww.shop.orcollate.xyz |
| Valid From | 2026-08-12T15:01:17+00:00 |
| Valid Until | 2026-11-10T15:01:16+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 0653F541039A070D8B4626421B90D3CB3C88 |
| Thumbprint | 17A5B624B72227D49222F152A329CCE6247B73EE |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) โ 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-11 11:50:22 UTC |
| Last Seen | 2026-08-30 16:17:12 UTC |
| Profile Built | 2026-08-30 17:03:24 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 29 |
Full dossier details are available via our API.