# IP Intelligence Briefing: 13.140.147.33/32
## Executive Summary
Target IP 13.140.147.33/32 presents as a low-risk Contabo cloud computing infrastructure asset with no detected malicious indicators. The IP resolves to a virtual machine hostname on the Contabo provider network with no active threat signals or blacklist entries.
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 0 (Low Risk) |
| **Provider** | Contabo (ASN 51167) |
| **Organization** | Johannes Selg |
| **Network Block** | 13.140.128.0/18 |
| **Geolocation** | Germany (DE) |
| **Infrastructure Type** | CloudCompute / Virtual Private Server |
| **Classification** | Hosting / Cloud Infrastructure |
## Network Observations
- DNS Resolution: PTR hostname `vmi3433043.contaboserver.net`
- Forward Resolution: Confirmed to contaboserver.net domain
- Service Status: No open ports detected; firewall/no services configuration
- TLS/HTTP: No certificates or web services observed
- Email Reputation: No email authentication records (SPF/DMARC not configured)
## Threat Assessment
- Threat Indicators: None detected
- Blacklist Status: 0 blacklist entries
- Campaign Association: None identified
- Tor/Proxy: Not a Tor exit node or proxy service
- Known Attacker: No association with known malicious campaigns
## Neighborhood Analysis
| Metric | Value |
|---|---|
| **Subnet** | 13.140.147.0/24 |
| **Abuse Density** | 0.3333 |
| **Classification** | Mostly Clean |
| **Total Siblings** | 3 |
| **Active Siblings** | 3 |
| **Threat Siblings** | 1 |
One neighboring IP (13.140.147.230) shows a risk score of 25, indicating elevated activity in the subnet.
## Historical Signals
- Total Observations: 22 signals over monitoring period
- Threat Persistence: 0 days
- Recent Activity: Signals show basic DNS/routing and provider classification data
- Trend: No escalation in risk profile; threat observation count remains minimal (1)
## Security Recommendations
Based on current risk profile (Score: 0), no immediate blocking or firewall actions are recommended. However, analysts should:
1. Monitor Subnet Context: 13.140.147.230 shows elevated risk (Score: 25); consider monitoring traffic to/from this IP
2. Verify Legitimate Business Purpose: Confirm expected business use case for Contabo hosting infrastructure
3. Log Traffic Patterns: Monitor for unusual traffic volumes or protocol anomalies from this IP
## Conclusion
IP 13.140.147.33/32 is a Contabo cloud computing asset with low-risk characteristics. No evidence of malicious activity detected. Standard logging and monitoring practices recommended; no immediate blocking required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | TT-20260601 |
| CIDR Block | 13.140.128.0/18 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vmi3433043.contaboserver.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vmi3433043.contaboserver.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) โ 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-26 15:19:55 UTC |
| Last Seen | 2026-08-12 20:31:18 UTC |
| Profile Built | 2026-08-12 20:39:56 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.