141.11.21.201
IP Intelligence Dossier
Your IP: 216.73.217.135
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 141.11.21.201
Date: 2026-06-11
---
**1. Overview**
- Risk Profile: Low Risk (Risk Score: 25) | Provider Score: 0 | Authority Score: 0 | Stability Score: 0
- Ownership: Managed by netutils-mnt (OVH Infrastructure) under the RACK400_com_netherlands_Infrastructure network (AS16276).
- Geolocation: Amsterdam, North Holland, Netherlands (49.38° N, 3.85° E).
- Network Role: CloudCompute server hosting a web server (HTTPS on port 443).
---
**2. Threat & Vulnerability Assessment**
- Threat Indicators: No malicious activity detected (no known attackers, spam, or Tor exit nodes).
- DNSSEC: Validated.
- DNSBL: Listed in 1/8 DNSBLs (moderate risk).
- TLS/HTTP: No certificates or banners detected during scans.
---
**3. Activity Trends**
- Recent Observations (2026-06-11):
- Minimal risk signal (confidence: 30%) with no DNS or routing anomalies.
- Historical scan data from 2026-06-01 revealed open ports (no banners/certs).
- Stability: Subnet (141.11.21.0/24) has 0% abuse density, but 1 threat sibling (141.11.21.145, Risk Score: 40).
---
**4. Network Context**
- Subnet: 141.11.21.0/24 (OVH infrastructure).
- Neighbors:
- 141.11.21.145: High-risk neighbor (Score: 40).
- Subnet classification: mostly_clean.
- Routing: BGP prefix stable (no recent route changes).
---
**5. Relationships**
- Linked Entities:
- Same network: RACK400_com_netherlands_Infrastructure (AS16276).
- No connections to known malicious organizations or domains.
---
**6. Recommendations**
- Monitor Neighbor: Investigate 141.11.21.145 for potential lateral movement or subnet-wide threats.
- Verify DNSBL: Check if the IP is flagged in DNSBLs (e.g., Spamhaus, Project Honey Pot).
- Scan for Misconfigurations: Ensure HTTPS services (port 443) are properly configured with valid TLS certificates.
Conclusion: The IP appears legitimate but resides in a subnet with a high-risk neighbor. Prioritize monitoring the subnet for anomalies.
---
*Generated via IPDebrief intelligence tools.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | netutils-mnt |
| ASN | AS16276 |
| Network Name | RACK400_com_netherlands_Infrastructure |
| CIDR Block | 141.11.21.0/24 |
| RIR | RIPE |
| Country | NL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
No certificate
Issued by —
N/A
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 31% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 27% | 10 | 17 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-28 23:50:46 UTC |
| Last Seen | 2026-06-29 05:55:53 UTC |
| Profile Built | 2026-06-29 17:58:56 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 25 |
🔍 22 signal types · 25 observations collected
This report is generated from 22+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.