13.140.164.141
# Intelligence Briefing: 13.140.164.141
Classification: Low Risk
Date: 2026-08-12
Analyst: IPDebrief Intelligence
## Executive Summary
IP address 13.140.164.141 is a cloud infrastructure asset hosted on Contabo (ASN: 51167) with a low-risk reputation profile. The IP shows minimal threat indicators but has been observed on multiple DNS blacklists. The neighborhood analysis indicates low abuse density within the /24 subnet.
## Technical Profile
| Attribute | Value |
|---|---|
| **IP Address** | 13.140.164.141/32 |
| **ASN** | 51167 (Johannes Selg) |
| **Organization** | Johannes Selg |
| **Network Block** | 13.140.128.0/18 |
| **Country** | Germany (DE) |
| **Geolocation** | 51.17°N, 10.45°E (400km radius) |
| **Infrastructure Type** | CloudCompute (Contabo) |
| **Risk Score** | 0/100 |
| **Abuse Confidence** | Not Available |
## Service Analysis
- HTTP (Port 80): Active, nginx server, HTTP/1.1
- SSH (Port 22): Active, OpenSSH_8.9p1 Ubuntu-3ubuntu0.16
- TLS Certificate: None observed
- HTTP Status: 200 OK
- TTFB: 448ms average
## DNS & Reverse Resolution
- PTR Record: vmi3362579.contaboserver.net
- Forward Resolution: vmi3362579.contaboserver.net (confirmed)
- DNSSEC: Valid
- Blacklist Status: Listed on 8 DNS blacklists (1 with high severity rating)
## Relationship Graph
- Hostname Association: vmi3362579.contaboserver.net
- Network Association: TT-20260601
- Total Relationships: 14 (10 DNS associations, 4 network associations)
## Neighborhood Analysis
| Metric | Value |
|---|---|
| **Subnet** | 13.140.164.141/24 |
| **Abuse Density** | 0.0% (Clean) |
| **Total Siblings** | 2 |
| **Active Siblings** | 2 |
| **Threat Siblings** | 0 |
| **Neighbor Risk** | 13.140.164.91 (Risk: 25/100) |
## Observation History
- Total Observations: 24 signals
- Latest Observation: 2026-08-12T18:15:50 UTC
- Threat Persistence: 0 days
- Ownership Changes: 0
Recent observations indicate stable service characteristics with nginx HTTP service and consistent HTTP/1.1 responses. DNS blacklist activity was detected with high-severity listing on one source.
## Threat Indicators
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaign Match: None
- Cert Matches: 0
- Correlated IPs: 0
## Recommendations
1. Block SSH Access: Consider implementing fail2ban or rate limiting on port 22 given the cloud hosting context
2. Monitor DNS Listings: Investigate the 8 DNS blacklist listings to determine source and relevance
3. Continue Monitoring: Maintain observation on this IP as part of normal baseline monitoring
4. No Immediate Action Required: Risk score of 0 indicates low threat likelihood
---
*Generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | TT-20260601 |
| CIDR Block | 13.140.128.0/18 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vmi3362579.contaboserver.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vmi3362579.contaboserver.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 21% | 9 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-24 02:12:57 UTC |
| Last Seen | 2026-08-12 18:14:38 UTC |
| Profile Built | 2026-08-12 18:23:31 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 25 |
Full dossier details are available via our API.