207.180.211.134

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP INTELLIGENCE BRIEFING

Target: 207.180.211.134/32

Classification: Low Risk / Clean

Report Date: August 5, 2026

---

Executive Summary

207.180.211.134 is a legitimate Contabo cloud hosting infrastructure IP located in Germany with no malicious indicators. The address demonstrates clean reputation metrics across all observation periods with zero threat signals.

---

Network Profile

Organization: Johannes Selg (CONTABO)
ASN: AS51167
Network Block: 207.180.192.0/19 (ARIN Registry)
Geolocation: Germany (DE), Berlin timezone
Infrastructure Type: CloudCompute / Hosting
Classification: Web Server

DNS Resolution:

PTR Hostname: vmi3050984.contaboserver.net
Forward Resolution: Confirmed
Domain: contaboserver.net

Open Services:

Port	Protocol	Service
80	TCP	HTTP
443	TCP	HTTPS
22	TCP	SSH

TLS Certificate:

Subject: CN=mail.spantik.com.au
Issuer: Let's Encrypt (US)
Protocol: HTTP/2 enabled
HSTS: Enabled

---

Threat Assessment

Risk Score: 0 (Clean)
Abuse Confidence Score: Null
Blacklist Count: 0
Known Campaigns: None
Is Tor Exit/Proxy/VPN: False
Is Known Attacker: False
Is Spam Source: False

Control Plane:

BGP Prefix: 207.180.210.0/23
Route Stability: False
Operator Score: 0.2609 (Basic)
DNSSEC: Valid

---

Observation History (23 Observations)

Recent activity shows consistent clean classification:

August 5, 2026: Clean subnet classification, zero inherited risk, abuse density: 0
July 29, 2026: Geolocation validation confirmed (Nuremberg, Germany), RTT metrics: 117-172ms average
No persistent malicious behavior detected
No threat observation counts recorded

---

Network Neighborhood Analysis

Subnet: 207.180.211.134/24
Abuse Density: 0 (Clean)
Total Siblings: 1
Active Siblings: 1
Threat Siblings: 0
Risk Distribution: High: 0, Medium: 0, Low: 0

No adjacent IPs flagged for malicious activity.

---

Relationship Graph

Primary associations: CONTABO network infrastructure
DNS hostname associations: vmi3050984.contaboserver.net
No external malicious entity correlations

---

Recommended Actions

No firewall rules or blocking actions recommended. The IP demonstrates clean reputation across all metrics with no threat indicators. Standard monitoring practices apply.

---

Analyst Notes

This IP represents standard Contabo cloud hosting infrastructure hosting a legitimate web service (mail.spantik.com.au). The VPS instance (vmi3050984) shows normal operational patterns with no anomaly signals. Route stability issues noted are infrastructure-level and do not correlate with malicious activity.

Confidence Level: High

Action Required: None

Priority: Low

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇩🇪 Germany
Region	Grand Est
City	Lauterbourg
Timezone	Europe/Berlin
Latitude	51.17
Longitude	10.45

🏢 Ownership & Registration

Organization	Johannes Selg
ASN	AS51167
Network Name	CONTABO
CIDR Block	207.180.192.0/19
RIR	ARIN
Country	DE
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	vmi3050984.contaboserver.net
Forward Confirmed	Yes — FCrDNS verified
Forward Hostnames	`vmi3050984.contaboserver.net`

🔐 DNS Hygiene

Hygiene Score	40% (Fair)
SPF	0/2 domains
DMARC	0/2 domains
FCrDNS	Verified
DNSSEC	Valid
CAA	Not configured
Domains Checked	2 domains

☁️ Network Classification

Infrastructure	Unknown
Service Purpose	Web Server
Network Tier	Tier 3 — Basic operator with some routing infrastructure

No specific classification

🔌 Services & Open Ports

Port	Service	Protocol	Banner
80	http	tcp	—
443	https	tcp	—
22	ssh	tcp	SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18
Closed Ports	25, 3389, 8080, 8443 (3 open / 7 scanned)

Server	nginx
HTTP Title	—
SSH Version	SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18

🔐 TLS Certificate

An expired certificate for CN=mail.spantik.com.au was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.

🔒

CN=mail.spantik.com.au

Issued by CN=E8, O=Let's Encrypt, C=US

Self-signed: No

SANs	mail.spantik.com.au
Valid From	2026-03-16T10:39:33+00:00
Valid Until	2026-06-14T10:39:32+00:00 (expired)
TLS Protocol	Tls13
Cipher Suite	TLS_AES_256_GCM_SHA384
Signature Algorithm	sha384ECDSA
Validity Period	89 days
Serial Number	06B55B16F839559018B067380E2D20258CD9
Thumbprint	7F851297D117D10F8C0FBB306DDF1B43FF92ADFB

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	35%	2	4
routing	13%	1	1
services	30%	2	3
ownership	27%	2	3
reputation	17%	1	2
geolocation	32%	2	3
Overall	26%	10	16

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (70%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-07-21 12:55:18 UTC
Last Seen	2026-08-12 15:52:59 UTC
Profile Built	2026-08-12 16:06:29 UTC
Data Freshness	Live
Signal Types	23
Total Observations	26

🔍 23 signal types · 26 observations collected

This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

207.180.211.134📋 Copy