# IP Intelligence Briefing: 84.247.183.157/32
## Executive Summary
IP 84.247.183.157 is a cloud-hosted resource associated with Contabo infrastructure (ASN 51167, organization: Johannes Selg). The IP registers as Moderate Risk (score: 50) with limited but notable threat indicators. No active services or open ports detected.
## Ownership & Infrastructure
- Organization: Johannes Selg (ASN 51167)
- Network Block: 84.247.160.0/19 (TT-20240115)
- Provider: Contabo (CloudCompute infrastructure)
- Geolocation: Germany (DE), coordinates 51.17°N, 10.45°E
- DNS: vmi3126367.contaboserver.net
## Risk Assessment
| Metric | Value |
|---|---|
| Risk Score | 50 (Moderate) |
| DNSBL Listings | 2 of 8 lists |
| Max Severity | High |
| Abuse Density (Subnet) | 0 |
| Known Attacker | No |
| Tor Exit/Proxy | No |
## Observed Threat Indicators
- Listed on 2 blacklist feeds (signal observed 2026-08-13)
- No active services detected (firewalled/no services)
- No persistent malicious behavior observed
- Honeypot strikes: 0
- Enumeration strikes: 0
## Related Entities
- Hostname: vmi3126367.contaboserver.net
- Network: TT-20240115 (84.247.183.0/24)
- Neighbor IP: 84.247.183.231 (risk score: 25)
## Historical Activity
- 17 total observations recorded
- Recent signals include geolocation validation and DNS resolution
- No ownership changes detected
- Average ownership persistence: low
## Recommended Actions
Given the moderate risk score and limited threat indicators, this IP does not require immediate blocking. However, recommend:
1. Passive Monitoring: Log traffic for correlation with other threat indicators
2. Block if: Outbound connections detected to known malicious destinations
3. Review: Monitor for service exposure changes
## Conclusion
This IP represents a low-to-moderate risk cloud hosting resource with minimal active threat indicators. The primary concern is DNSBL listing, but no persistent malicious activity or service exposure detected. SOC teams may monitor passively or block based on organization-specific policies for cloud hosting IPs.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | TT-20240115 |
| CIDR Block | 84.247.160.0/19 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vmi3126367.contaboserver.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vmi3126367.contaboserver.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 8080 | http-alt | tcp | โ |
| 8443 | https-alt | tcp | โ |
| Closed Ports | 22, 25, 80, 443, 3389 (2 open / 7 scanned) | ||
| Server | kong/3.9.1 |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | 2026-07-09T18:30:36+00:00 |
| Valid Until | 2046-07-04T18:30:36+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256ECDSA |
| Validity Period | 7300 days |
| Serial Number | 00B0F33F214FE5193DFB354D5382A5DEF1 |
| Thumbprint | F729BA7F1892ACF7FBDFF6787DE77C21FAC02F89 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 8% | 2 | 3 |
| Data Coherence | Mixed Signals (68%) โ 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
โ TLS certificate claims US but primary geo says DE
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-09 10:51:48 UTC |
| Last Seen | 2026-08-27 10:01:26 UTC |
| Profile Built | 2026-08-29 04:37:21 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.