# IP Intelligence Briefing: 213.136.66.217
## Executive Summary
IP address 213.136.66.217 is a low-risk residential cloud compute endpoint operated by CONTABO (ASN 51167) in Lauterbourg, France. The IP shows no active threat indicators, no open services, and no evidence of malicious activity. SOC analysts may monitor as part of broader Contabo infrastructure but no immediate action required.
## Technical Profile
- Risk Score: 0 (Low Risk)
- Provider Score: 0 / Authority Score: 0
- ASN: 51167 (Johannes Selg / CONTABO)
- CIDR Block: 213.136.64.0/20
- Infrastructure Type: CloudCompute (Contabo)
- Geolocation: France, Grand Est, Lauterbourg (48.54°N, 6.06°E)
- DNS PTR: vmi3265102.contaboserver.net
- Forward Resolution: vmi3265102.contaboserver.net (confirmed)
## Network & Service Status
- Open Ports: None detected
- HTTP/TLS Services: None detected
- Service Purpose: Firewalled / No Services
- Routing Status: Route instability detected (isRouteStable: false)
- DNSSEC: Valid
- DNSBL Listings: 0 (null abuseConfidenceScore)
## Threat Assessment
- Abuse Confidence: Not applicable (null)
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0
- Pulsedive Risk: Not applicable
## Historical Observations (Last 17 Signals)
Recent observations recorded 2026-08-13 show:
- Geolocation signals consistently placed in France (confidence 0.40-0.50)
- ICMP validation blocked (ICMP blocked - unable to validate)
- Operator classification: "Basic"
- No threat persistence or observation count recorded
- No ownership changes detected
## Network Relationships
- DNS Associations: vmi3265102.contaboserver.net (multiple entries)
- Network Relationships: CONTABO (multiple entries)
- Related Hostnames: vmi3265102.contaboserver.net
## Neighborhood Analysis
- Subnet: 213.136.66.217/24
- Abuse Density: 0
- Neighbor Count: 0
- Classification: None
- Risk Inheritance: 0
- Threat Siblings: 0
## Recommended Actions
No immediate action required. IP is classified as low-risk with no threat indicators. SOC analysts may:
- Monitor for any changes in service status or risk classification
- Include in Contabo infrastructure watchlist if investigating related incidents
- No firewall rules recommended at this time
## Conclusion
This IP represents a standard Contabo cloud server with no evidence of malicious use. The IP is properly registered, geolocated to France, and shows no threat indicators across all available data sources. No blocking or mitigation actions are warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | CONTABO |
| CIDR Block | 213.136.64.0/20 |
| RIR | RIPE |
| Country | FR |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vmi3265102.contaboserver.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vmi3265102.contaboserver.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-10 05:11:56 UTC |
| Last Seen | 2026-09-27 14:44:03 UTC |
| Profile Built | 2026-09-13 10:45:48 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 28 |
Full dossier details are available via our API.