217.76.56.8📋 Copy

## IP INTELLIGENCE BRIEFING: 217.76.56.8/32

Classification: Low Risk Cloud Infrastructure Host

Date: 2026-06-21

Analyst: IPDebrief Intelligence System

EXECUTIVE SUMMARY

IP 217.76.56.8 is a low-risk cloud hosting endpoint operated by Contabo (ASN: 51167) in Germany. The address demonstrates stable infrastructure characteristics with no active threat indicators. Risk score of 25 indicates minimal threat posture. No immediate blocking required; standard monitoring recommended.

---

PROFILE OVERVIEW

---

NETWORK CHARACTERISTICS

Open Services:

• Port 80/tcp: HTTP (nginx)
• Port 443/tcp: HTTPS (TLS 1.3 enabled)
• Port 22/tcp: SSH (OpenSSH_8.2p1 Ubuntu-4ubuntu0.5)

TLS Certificate:

• Issuer: Let's Encrypt (R13)
• Subject: app.whatsamarketingpro.es
• Validity: Active (not self-signed)

HTTP Configuration:

• Server: nginx
• HTTP/2: Enabled
• HSTS: Enabled (max-age=31536000)
• Status Code: 200

DNS Resolution:

• PTR: vmi1123922.contaboserver.net
• Forward Resolution: Confirmed
• Email Authentication: SPF/DMARC not configured

---

THREAT INDICATORS

• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Blacklist Count: 0
• Threat Campaigns: None observed
• DNSBL Listings: 1 of 8 total (non-critical)

---

NETWORK NEIGHBORHOOD ANALYSIS

Subnet: 217.76.56.8/24

• Abuse Density: 0% (Clean)
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0

Neighbor IP: 217.76.56.121

• Risk Score: 25
• Authority Score: 60
• Classification: Low Risk

---

OBSERVATION HISTORY (24 Signals)

Recent observations confirm stable infrastructure characteristics:

• 2026-06-21: Cloud hosting profile maintained; no infrastructure type changes
• 2026-06-16: HTTP/2 server fingerprint consistent; TLS configuration stable
• Subnet Analysis: Persistent "clean" classification across monitoring period
• Ownership: No changes detected (stability score: 0)

---

CONTROL PLANE STATUS

• Origin ASN: 51167
• BGP Prefix: 217.76.48.0/20
• Route Stability: False (minor route changes observed)
• DNSSEC: Valid
• IRR Consistency: N/A
• Route Changes (30d): 0

---

RELATIONSHIP GRAPH

26 Relationships Identified:

• Same Network: 14 relationships (TT-20221122 network)
• DNS Association: 12 relationships (vmi1123922.contaboserver.net)
• No external entity associations detected

---

SECURITY RECOMMENDATIONS

Current Risk Assessment: Low Risk

Action Required: None at this time

Standard Monitoring Practices:

• Monitor for new threat indicator associations
• Track subnet-level activity patterns
• Review certificate expiration for app.whatsamarketingpro.es
• Verify continued compliance with organizational security policies

No immediate firewall rules recommended. The IP demonstrates benign hosting behavior consistent with legitimate Contabo infrastructure.

---

CONCLUSION

IP 217.76.56.8 represents standard cloud hosting infrastructure with no malicious indicators. The address maintains a clean reputation score (25) and operates within a low-abuse-density subnet. Routine SOC monitoring is sufficient; no blocking or alerting actions warranted at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.