213.199.54.107📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 213.199.54.107/32

Classification: Cloud Infrastructure - Low Risk

Date Generated: 2026-06-15

---

## EXECUTIVE SUMMARY

IP 213.199.54.107 is a low-risk virtual machine instance hosted on Contabo cloud infrastructure. The IP shows no active malicious indicators, no open services, and no threat intelligence associations. Classification indicates stable, benign network behavior typical of cloud compute environments.

---

## RISK PROFILE

---

## OWNERSHIP & INFRASTRUCTURE

• Organization: Johannes Selg
• ASN: 51167
• Provider: Contabo
• Infrastructure Type: CloudCompute
• Country: Germany (DE)
• Location: Lauterbourg, Grand Est
• Registration RIR: RIPE

---

## NETWORK CHARACTERISTICS

• PTR Record: vmi3301104.contaboserver.net
• DNS Forward Resolution: Forward confirmed (1 hostname)
• Services: No open ports detected (firewalled)
• TLS/HTTP: No services exposed
• Network Role: Cloud-hosted virtual infrastructure

---

## THREAT INTELLIGENCE

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Threat Feeds: None detected
• Campaign Associations: None
• DNS Blacklist Status: Not listed on major feeds

---

## GEOLOCATION VALIDATION

• GeoConsensus: Validated
• Accuracy Radius: 400km
• ICMP Validation: Unable to validate (blocked)
• Minimum Possible RTT: 8ms

---

## OBSERVATION HISTORY

• Total Observations: 20
• Ownership Changes: 0
• Threat Persistence: 0 days
• Persistently Malicious: False
• Recent Activity: Single threat observation on 2026-06-15
• Temporal Stability: High (no ownership or threat persistence indicators)

---

## NETWORK RELATIONSHIPS

• DNS Associations: vmi3301104.contaboserver.net (multiple entries)
• Network Associations: TT-20240306 (same network)
• Total Relationships: 30
• Certificate Associations: None

---

## SUBNET ANALYSIS (213.199.54.0/24)

• Abuse Density: Low
• Subnet Classification: Mostly clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1 (historical)

---

## ACTIONABLE RECOMMENDATIONS

Based on risk profile and threat intelligence, the following actions are recommended:

1. Allow Traffic: No blocking required; risk score indicates benign activity

2. Monitoring: Standard traffic monitoring sufficient

3. Firewall Rules: No specific rules needed (no open services)

4. Threat Hunting: Not recommended; no malicious indicators present

5. Reputation: Maintain positive reputation; no abuse history detected

---

## CONCLUSION

IP 213.199.54.107 represents cloud infrastructure with low risk characteristics. The IP is associated with Contabo's cloud hosting services and shows no malicious behavior patterns. SOC teams may treat this IP as benign with standard monitoring practices. No immediate defensive actions are warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.