IPDebrief

84.247.175.181

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP Intelligence Briefing: 84.247.175.181/32

Classification: Moderate Risk

Report Date: Current

Intel Confidence: High

---

Executive Summary

IP address 84.247.175.181 is a Contabo VPS located in Lauterbourg, Grand Est, Germany. The IP exhibits moderate risk (score: 50) with no active threat indicators. The address is associated with a Contabo virtual server (vmi3344597.contaboserver.net) and shows stable ownership patterns with no observed malicious activity.

---

Network Profile

---

Threat Assessment

Overall Risk Score: 50 (Moderate)

MetricStatus
Is Tor Exit NodeNo
Is Known AttackerNo
Is Spam SourceNo
Blacklist Count0
DNSBL Listed2/8 lists
Open PortsNone detected
ServicesFirewalled / No Services

Threat Indicators: No active threat indicators observed. No known campaigns or attacker correlations identified.

---

Observations & History

The IP has maintained stable network characteristics with no significant threat escalation patterns observed.

---

Network Relationships

---

Subnet Neighborhood Analysis

Subnet: 84.247.175.175/24

The immediate /24 neighborhood shows minimal abuse activity, with this IP being the primary observed address.

---

Recommended Security Actions

Based on the moderate risk profile, consider implementing the following:

```bash

# iptables

iptables -A INPUT -s 84.247.175.181 -j DROP

# nftables

nft add rule inet filter input ip saddr 84.247.175.181 drop

# nginx

deny 84.247.175.181;

# pfSense

84.247.175.181/32

# Cloudflare WAF

action: block

filter: ip.src eq 84.247.175.181

# AWS WAF

Addresses: ["84.247.175.181/32"]

Description: IPDebrief risk 50

```

Note: These recommendations are probabilistic and should be combined with additional threat intelligence before implementation.

---

Analyst Notes

This IP represents a standard Contabo VPS without confirmed malicious activity. The moderate risk score reflects the hosting provider's classification rather than active threat behavior. Continuous monitoring is recommended, particularly if this IP begins establishing outbound connections or shows service activity. No immediate blocking action is required pending additional correlation data.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
Region34
CityBrandval
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

๐Ÿข Ownership & Registration

OrganizationJohannes Selg
ASNAS51167
Network NameTT-20240115
CIDR Block84.247.160.0/19
RIRRIPE
CountryDE
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRvmi3344597.contaboserver.net
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesvmi3344597.contaboserver.net

๐Ÿ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSVerified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureUnknown
Service PurposeWeb Server
Network TierTier 3 โ€” Basic operator with some routing infrastructure
No specific classification

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
8080http-alttcpโ€”
Closed Ports25, 3389, 8443 (4 open / 7 scanned)
ServerCaddy
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
24%
22
routing
17%
11
services
17%
11
ownership
35%
23
reputation
17%
12
geolocation
35%
23
Overall24%912
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) โ€” 1 contradiction(s)
AttributionModerate (55%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
โš  Geo sources disagree on country: NO, DE

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-06-11 21:18:49 UTC
Last Seen2026-06-23 13:11:58 UTC
Profile Built2026-06-21 19:50:04 UTC
Data FreshnessLive
Signal Types24
Total Observations27
๐Ÿ” 24 signal types ยท 27 observations collected
This report is generated from 24+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.