75.119.155.240📋 Copy

IP Intelligence Briefing: 75.119.155.240

*Generated via IPDebrief Threat Intelligence Platform*

---

**1. IP Profile**

• Risk Score: 25 (Low Risk)
• Provider: Contabo (Cloud Hosting)
• Ownership: Registered to Johannes Selg (ARIN)
• Geolocation: Lauterbourg, Germany (51.17°N, 10.45°E)
• Network Role: Web Server (Apache, ports 80/443/22)
• TLS Certificate: Issued to *phone.invrasac.com* (Let’s Encrypt)

---

**2. Observation History**

• DNS Activity:

- Resolves to `vmi3144220.contaboserver.net` (PTR record).

- Domain *invrasac.com* has SPF record but no DMARC, indicating potential email spoofing risk.

• Network Behavior:

- Identified as a cloud server (Contabo) with no signs of Tor, CDN, or residential activity.

- HTTP server banner: *Apache* (status 200, no HSTS or CSP headers).

• Threat Indicators:

- No malicious indicators, blacklists, or known campaigns detected.

---

**3. Relationships**

• DNS Associations:

- Linked to `contaboserver.net` (no email security records).

• Network Connections:

- Subnet `75.119.155.240/24` (abuse density: 0.5, mostly clean).

- Shared network with Contabo (cloud hosting provider).

---

**4. Neighborhood Analysis**

• Subnet: `75.119.155.240/24`
• Neighbor Risk:

- 1 active sibling IP (`75.119.155.172`) with risk score 25 (low risk).

• Abuse Density: 0.5 (moderate risk in subnet).

---

**5. Recommendations**

• Monitor DNS: Track *invrasac.com* for phishing or spoofing attempts due to missing DMARC.
• Secure TLS: Ensure the Let’s Encrypt certificate for *phone.invrasac.com* is valid and configured correctly.
• Subnet Context: Investigate the `75.119.155.172` neighbor for potential lateral movement or shared threats.
• Cloud Configuration: Verify Contabo server settings to prevent misconfigurations (e.g., open ports, weak authentication).

---

*End of Briefing*

*Generated on 2026-06-09*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.