94.72.96.91📋 Copy

IP Intelligence Briefing: 94.72.96.91

Date: 2026-06-09

---

**1. Risk Assessment**

• Overall Risk Score: Low (25/100)
• Threat Indicators: No malicious activity detected. No known campaigns, spam, or abuse associations.
• Network Role: CloudCompute instance hosted by Contabo (Germany).
• Geolocation: Swidnik, Germany (51.17°N, 10.45°E).

---

**2. Ownership & Infrastructure**

• ASN: 51167 (Johannes Selg)
• Provider: Contabo (Cloud Hosting)
• Services:

- Open ports: [Omitted] (no explicit service exposure detected).

- TLS Certificate: Valid, issued to `vmi3034300.contaboserver.net` (nginx/1.24.0).

- No suspicious banners or vulnerabilities observed.

---

**3. Observation History**

• TLS Scan (2026-06-09):

- TLS 1.3 with AES-256-GCM encryption.

- Server banner: `nginx/1.24.0 (Ubuntu)`.

• DNSBL Listing:

- Listed in 1/8 DNSBLs (low priority).

• Network Stability:

- BGP prefix `94.72.96.0/20` with stable route changes.

- DNSSEC valid; no spoofing detected.

---

**4. Network Relationships**

• DNS Associations:

- Linked to `vmi3034300.contaboserver.net` (Contabo host).

• Subnet Peers:

- Shares subnet `94.72.96.91/24` with 1 active neighbor.

- Neighbor 94.72.96.152 has higher authority score (50) but no direct threat indicators.

---

**5. Neighborhood Analysis**

• Subnet Abuse Density: 0% (mostly clean).
• Neighbor Risk:

- 94.72.96.152: RiskScore 25 (low), AuthorityScore 50.

- No evidence of lateral movement or shared malicious activity.

---

**6. Recommendations**

• Monitor Neighbor: 94.72.96.152 shows elevated authority; investigate for potential collation.
• Verify DNSBL Context: Check if DNSBL listing is false positive or tied to legitimate hosting.
• Maintain Baseline: No immediate action required for 94.72.96.91; continue standard monitoring.

---

End of Briefing

*Generated by IPDebrief Threat Intelligence Platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.