213.199.36.119📋 Copy

IP Intelligence Briefing: 213.199.36.119

Date: 2026-06-07

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Registered to Johannes Selg (ASN 51167, Contabo).
• Geolocation: Germany (DE), Lauterbourg, coordinates 51.17°N, 10.45°E.
• Network Role: Cloud compute server (Contabo), hosting a web server with nginx/1.28.1.
• Services:

- HTTP/HTTPS on ports 80/443.

- Valid TLS certificate (Sectigo CA) for *.plexuserp.com.

• Threat Indicators: No malicious activity detected (no abuse reports, spam, or known attacker associations).

---

**2. Observation History**

• Recent Activity:

- Observed on 2026-06-07 with confidence 0.60 (Basic risk rating).

- Subnet abuse density: 0.5 (mixed risk in 213.199.32.0/20).

- No persistent malicious behavior; threat observation count: 1.

• Stability:

- Ownership unchanged (0 changes in 30 days).

- BGP route stability: unstable (route changes detected).

---

**3. Relationships & Associations**

• DNS:

- Resolves to mail.hadron.tech (SPF/DKIM configured).

- No hosted domains detected.

• Network:

- Same subnet as TT-20240306 (likely Contabo infrastructure).

- Linked to 213.199.36.187 (risk score 25, authority score 50).

• Certificates:

- TLS certificate issued to *.plexuserp.com (valid, not self-signed).

---

**4. Neighborhood Analysis**

• Subnet: 213.199.36.119/24.
• Neighbor Risk:

- 1 active sibling (213.199.36.187) with moderate risk.

- Subnet abuse density: 0.5 (mostly clean, but some risk).

• Notable: No high-risk neighbors detected.

---

**5. Recommendations**

• Monitoring: Track subnet abuse density and neighbor risk trends.
• Validation: Confirm DNS associations (mail.hadron.tech) are legitimate.
• Firewall: No immediate blocking required; focus on anomalous traffic patterns.

Conclusion: This IP is a low-risk cloud server with no malicious indicators. Monitor for unexpected behavior or subnet-level changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.