79.143.189.203📋 Copy

IP Intelligence Briefing: 79.143.189.203

Date: 2026-06-14

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Registered to *Johannes Selg* (ASN 51167, Contabo).
• Geolocation: Germany (DE), Lauterbourg, 51.17°N, 10.45°E.
• Network Role: Cloud-hosted single-service server (SSH via OpenSSH_9.9).
• Threat Indicators: No malicious activity detected; no blacklisted or compromised status.

---

**2. Observation History**

• Last Scanned: June 5, 2026 (SSH service active, no other open ports).
• Trend: Stable risk profile; no recent changes in geolocation or threat signals.
• DNS: Resolves to `vmi3252127.contaboserver.net` (Contabo infrastructure).

---

**3. Network Relationships**

• Linked Entities:

- Contabo (same network provider).

- DNS hostname `vmi3252127.contaboserver.net`.

• Subnet: 79.143.189.0/24.
• Neighbors:

- 79.143.189.61: Low risk (score 0).

- 79.143.189.125: Moderate risk (score 25).

• Subnet Abuse Density: 1/20 (mostly clean).

---

**4. Threat Context**

• No Malicious Campaigns: No known malware, phishing, or exploit activity.
• DNS Security: DNSSEC valid, no CAA records.
• BGP: Stable route with no recent changes.

---

**5. Recommendations**

• Monitor Subnet: Track 79.143.189.125 due to higher risk score.
• Verify DNS: Confirm `vmi3252127.contaboserver.net` is legitimate.
• Baseline Traffic: Establish SSH traffic baselines for anomaly detection.
• No Immediate Action: No firewall rules or blocking required for this IP.

---

Note: This IP appears to be a legitimate cloud-hosted server with no current threats. Focus on subnet-level monitoring and validate associated DNS records.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.