217.216.92.40📋 Copy

IP INTELLIGENCE BRIEFING: 217.216.92.40/32

EXECUTIVE SUMMARY

IP address 217.216.92.40 is a Contabo cloud computing VPS instance with a Low Risk classification (Risk Score: 25). The IP belongs to ASN 40021 and network TT-20251105, registered under the organization "Johannes Selg." The endpoint operates within a clean subnet environment with minimal abuse density.

OWNERSHIP & INFRASTRUCTURE

• Provider: Contabo (CloudCompute infrastructure)
• ASN: 40021
• CIDR Block: 217.216.80.0/20
• Infrastructure Type: Cloud Hosting, Multi-Service Host
• Registration: RIR Ripe

GEOLOCATION

• Reported Location: Granada, DE (Europe/Berlin timezone)
• Coordinates: 51.17°N, 10.45°E
• Validation Status: GeoPlausible = False
• RTT Anomaly: Measured RTT of 23ms conflicts with geographic distance of 5,941km (minimum expected RTT: 118.8ms), suggesting geolocation data may be inaccurate or spoofed.

NETWORK SERVICES

• Open Ports: 80/TCP (HTTP), 3389/TCP (RDP)
• Server Fingerprint: nginx/1.24.0 (Ubuntu)
• DNS Resolution: vmi3297943.contaboserver.net
• SSL/TLS: No certificate detected

THREAT ASSESSMENT

• Risk Score: 25 (Low Risk)
• Threat Indicators: None detected
• Blacklist Status: Not listed on any threat feeds
• Campaign Association: No known campaigns or correlation
• Control Plane: DNSBL listed on 1 of 8 total lists; route stability flagged as false

HISTORICAL ANALYSIS

Analysis of 24 signal observations indicates stable infrastructure characteristics with no significant threat posture changes. The IP consistently classifies as cloud hosting with no escalation to malicious activity.

NEIGHBORHOOD CONTEXT

• Subnet: 217.216.92.0/24
• Abuse Density: Low (1.0)
• Classification: Mostly Clean
• Sibling IPs: 1 active neighbor, not flagged as malicious

RECOMMENDATIONS

No immediate blocking actions recommended. The IP presents as a legitimate cloud VPS with low-risk characteristics. However, the open RDP port (3389) represents a potential lateral attack vector and should be monitored. No firewall rules are required at this time.

ASSESSMENT: This endpoint is classified as a low-risk Contabo hosting instance with no active threat indicators. Standard monitoring procedures apply.

---

*Generated from IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.