217.154.47.221📋 Copy

# IP INTELLIGENCE BRIEFING

Subject: 217.154.47.221/32

Classification: LOW RISK

Generated: 2026-06-25

---

## EXECUTIVE SUMMARY

The IP address 217.154.47.221 is a cloud-hosted web server infrastructure asset operated by IONOS SE (AS8560) with geolocation anchored to Worcester, England. Current risk assessment indicates LOW RISK (Score: 25/100) with no active threat indicators or known malicious activity. The asset exhibits standard web server characteristics with HTTPS termination and SSH access enabled.

---

## OWNERSHIP & INFRASTRUCTURE

---

## NETWORK SERVICES & FINGERPRINT

• Open Ports: 22 (SSH), 443 (HTTPS)
• Reverse DNS: ip217.154.47-221.pbiaas.com (forward-confirmed)
• TLS Certificate: None observed
• Email Authentication: SPF and DMARC records configured
• Control Plane: Route stability flagged as FALSE; 0 route changes in 30 days

---

## THREAT ASSESSMENT

Current Status

• Risk Score: 25/100 (Low Risk)
• Abuse Confidence: Not applicable
• Known Attacker: FALSE
• Tor Exit Node: FALSE
• Blacklist Count: 0
• Threat Feeds: None detected
• Campaign Correlation: None

Historical Signals (31 observations)

• Recent activity observed: 2026-06-25
• One proxy/VPN signal detected (confidence 0.85)
• No persistent malicious behavior observed
• Threat observation count: 1 (non-persistent)

---

## NEIGHBORHOOD ANALYSIS

Subnet: 217.154.47.0/24

Classification: mostly_clean

Abuse Density: 1/100 (minimal)

Total Siblings: 1 active

Threat Siblings: 1

Inherited Risk: 2/100

The immediate /24 neighborhood demonstrates minimal abuse density, consistent with cloud hosting infrastructure patterns.

---

## RELATIONSHIP GRAPH

Total Relationships: 122

Primary Associations:

• Same Network (gb-wtr-ionos-cloud-bhx1) – 117+ duplicate references
• No significant organizational or certificate correlations detected

---

## SECURITY ACTIONS RECOMMENDED

Current Risk Level: Low (25/100)

Recommendations: None required at this time. Standard defensive measures apply:

• Monitor for service behavior changes
• Verify SSH access policies align with organizational security standards
• Maintain baseline logging for HTTPS traffic patterns

---

## INTELLIGENCE CONCLUSION

IP 217.154.47.221 represents a benign cloud infrastructure asset with established web server functionality. The low risk score (25), absence of threat indicators, and clean neighborhood profile support continued monitoring without immediate defensive action. The single proxy-related historical signal requires contextual evaluation but does not elevate current threat posture.

Analyst Notes: Asset appears to be part of IONOS SE cloud hosting infrastructure. No evidence of command-and-control activity, spam source behavior, or known attack patterns. Standard SOC monitoring protocols apply.

---

*Intelligence produced by IPDebrief® Security Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.