86.48.22.56📋 Copy

IP Intelligence Briefing: 86.48.22.56

*Generated via IPDebrief Threat Intelligence Platform*

---

**1. Risk Profile**

• Risk Score: 25 (Low Risk)
• Provider: Contabo (cloud hosting)
• Ownership: Registered to Johannes Selg (ASN 40021).
• Geolocation: US (New York, Orangeburg), flagged as geo-plausible false due to inconsistent RTT (19ms) vs. 5,941km distance.
• Network Role: CloudCompute server (nginx/1.28.0, OpenSSH 9.6).

---

**2. Threat Indicators**

• No malicious activity: No indicators of exploitation, spam, or known attacker associations.
• TLS/SSL: No certificate data observed.
• DNS: Resolves to `vmi2924373.contaboserver.net` (no abuse signals).

---

**3. Observation History**

• Recent Activity:

- June 14, 2026: Cloud server with Contabo provider, no active threats.

- June 3, 2026: Geo-validation violation (RTT 19ms vs. 5,941km distance).

• Trend: Stable low-risk profile with no persistent malicious behavior.

---

**4. Network Relationships**

• Subnet: 86.48.22.0/24 (abuse density: 0).
• Associations:

- Linked to Contabo-hosted infrastructure.

- DNS hostname `vmi2924373.contaboserver.net` (no abuse flags).

• Neighbors: No neighboring IPs found in the subnet.

---

**5. Security Actions**

• Recommended: No firewall rules or actions required due to low risk.
• Mitigation: Monitor for unexpected service changes or geo-validation anomalies.

---

**6. Analyst Notes**

• The IP is a legitimate cloud server with no current malicious signals.
• Geo-validation inconsistencies may indicate misconfigured routing or spoofing, but no direct threat.
• No correlation to known campaigns or abuse networks.
• SOC Action: Retain low-priority monitoring; re-evaluate if new threats emerge.

---

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.