217.216.66.74
IP Intelligence Briefing: 217.216.66.74/32
Executive Summary
IP 217.216.66.74 is a Contabo cloud compute host classified as low-risk with an overall risk score of 25. The IP operates as a web server within the 217.216.64.0/22 BGP prefix, hosted under ASN 40021 (Johannes Selg). Current observations indicate minimal threat indicators with one DNSBL listing detected.
Network Profile
The IP resolved to vmi3208858.contaboserver.net via forward DNS with confirmation. Open ports include HTTP (80), HTTPS (443), and SSH (22). Server banners indicate Caddy web server software. No TLS certificate was observed during probing. The infrastructure is classified as cloud hosting with no CDN, proxy, VPN, or Tor exit node characteristics.
Geolocation and Infrastructure
Geolocation data places the IP in Germany (DE) with coordinates 51.17°N, 10.45°E. The control plane shows the BGP prefix 217.216.64.0/22 is not route-stable, with zero route changes observed in the past 30 days. RPKI validation and IRR consistency data were unavailable.
Threat Indicators
No active threat indicators were identified. The IP is not flagged as a known attacker, spam source, or Tor exit node. Blacklist count remains at zero. One DNSBL listing was recorded among 8 total lists scanned. No known campaigns or certificate matches were observed.
Observation History
Signal observation history contains 21 observations with the most recent activity recorded on June 14, 2026. The subnet 217.216.66.74/24 was classified as "mostly_clean" with an abuse density of 1. Threat persistence metrics show zero days and no persistently malicious designation.
Network Relationships
Forty-four relationships were identified in the relationship graph. Multiple same-network associations target network identifier TT-20251102. DNS associations link the IP to vmi3208858.contaboserver.net across multiple relationship entries.
Neighborhood Analysis
The /24 subnet 217.216.66.74/24 contains one total sibling with one active sibling and one threat sibling. Abuse density is rated at 1, with the subnet classification marked as "mostly_clean." No high-risk neighbors were identified in the neighborhood analysis.
Recommendations
No specific firewall rules or security actions were generated based on the risk profile. The low-risk classification (score 25) suggests standard monitoring is appropriate. SOC analysts may elect to monitor the IP for any emerging threat indicators, though immediate blocking is not recommended based on current data.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS40021 |
| Network Name | — |
| CIDR Block | — |
| RIR | RIPE |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vmi3208858.contaboserver.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vmi3208858.contaboserver.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Caddy |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 25% | 2 | 2 |
| Overall | 23% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-14 07:14:18 UTC |
| Last Seen | 2026-06-28 00:26:18 UTC |
| Profile Built | 2026-06-28 18:31:16 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 27 |
Full dossier details are available via our API.