13.140.148.246📋 Copy

# IP INTELLIGENCE BRIEFING: 13.140.148.246/32

Date: 2026-07-23

Classification: Cloud Infrastructure Asset

Risk Level: Low

---

## EXECUTIVE SUMMARY

IP address 13.140.148.246 is a Contabo cloud server instance deployed in München, Germany. The asset presents a low-risk profile with no observed malicious activity, no blacklist listings, and no threat indicators. The IP is associated with a Contabo virtual machine hosting environment and operates standard web server services.

---

## TECHNICAL PROFILE

Ownership & Registration

• AS Number: 51167 (Contabo GmbH)
• Organization: Johannes Selg
• Network Block: 13.140.128.0/18
• CIDR Registration: TT-20260601
• RIR: ARIN

Geolocation

• Country: Germany (DE)
• City: München
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin
• Geo Consensus: Validated across multiple sources

Network Classification

• Infrastructure Type: Cloud Compute
• Provider: Contabo
• Cloud Status: Active
• Hosting: Yes (VPS/Virtual Machine)
• CDN/Proxy/Vpn: No
• Mobile/Residential: No

---

## NETWORK SERVICES & DNS

Open Ports

DNS Resolution

• PTR Record: vmi3356253.contaboserver.net
• Forward Hostname: vmi3356253.contaboserver.net
• Domain: contaboserver.net
• Forward Confirmation: Pending
• Email Authentication: No SPF/DMARC records detected

Server Information

• Banner: Apache HTTP Server
• TLS Certificate: None detected (HTTP/HTTPS without certificate)
• HTTP Version: Not specified

---

## THREAT ASSESSMENT

Risk Scoring

• Overall Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0

Threat Indicators

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Abuse Confidence Score: Not applicable
• Known Campaigns: None
• Threat Feeds: No matches

Network Reputation

• Reputation Label: Low Risk
• Control Plane: Route stable (0 changes in 30 days)
• RPKI State: Not evaluated
• DNSSEC: Valid

---

## OBSERVATION HISTORY

Recent Signals (2026-07-23)

• Connection Status: Connection failures observed (0.30 confidence)
• DNS Resolution: Consistent resolution to vmi3356253.contaboserver.net (0.50 confidence)
• Operator Score: 0.2609 (Basic classification)
• Threat Persistence: No persistent malicious activity detected (0 days)
• Observation Count: 0 threat observations

Temporal Analysis

• Ownership Changes: 0
• Threat Observation Count: 0
• Persistence Status: Not persistently malicious

---

## NEIGHBORHOOD ANALYSIS

Subnet Overview

• Subnet: 13.140.148.0/24
• Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 0

Neighbor Analysis

Assessment: The /24 subnet demonstrates no abuse activity and maintains a clean classification across all sibling IPs.

---

## RELATIONSHIP MAPPING

Identified Relationships (19 total)

• Same Network: Multiple associations with network TT-20260601 (13.140.128.0/18)
• DNS Association: vmi3356253.contaboserver.net (primary hostname)
• External Relationships: None detected

Relationship Graph

The IP maintains internal relationships within the Contabo infrastructure without external associations to known malicious entities, campaigns, or compromised hosts.

---

## SECURITY RECOMMENDATIONS

Firewall Rules

No blocking or restrictive rules recommended. The IP presents a low-risk profile consistent with legitimate cloud hosting operations.

Monitoring Indicators

• Continue monitoring for any changes in DNS resolution patterns
• Track SSH connection attempts (port 22) for potential unauthorized access
• Monitor HTTP/HTTPS traffic for anomalies

Risk Mitigation

• Standard web server hardening procedures apply
• No additional controls required beyond organizational baseline
• No IP reputation-based blocking indicated

---

## INTELLIGENCE CONCLUSION

IP 13.140.148.246 is a legitimate Contabo cloud server instance operating from München, Germany. The asset demonstrates:

1. Low Risk Profile: Zero risk score with no threat indicators or blacklist listings

2. Clean Neighborhood: Subnet shows no abuse activity across sibling IPs

3. Standard Infrastructure: Typical cloud VPS with web server and SSH services

4. No Malicious Activity: No observed campaigns, attacks, or persistence

5. Legitimate Registration: Properly registered with Contabo infrastructure

Recommended Action: No special handling required. Treat as benign cloud infrastructure asset. Monitor for any changes in behavior or classification.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.