31.220.74.219📋 Copy

IP INTELLIGENCE BRIEFING: 31.220.74.219

Classification: Low Risk / Cloud Compute Infrastructure

Date Generated: 2026-08-13

---

EXECUTIVE SUMMARY

IP 31.220.74.219 is a cloud compute server operating on Contabo infrastructure with a low-risk profile. No active threat indicators or malicious activity detected. IP is classified as a firewalled VMI with no open ports.

---

OWNERSHIP & NETWORK DATA

• ASN: 51167 (Contabo GmbH)
• Organization: Johannes Selg
• CIDR Block: 31.220.72.0/21
• RIR: RIPE
• Network Name: TT-20230217

GEOLLOCATION

• Country: France (FR)
• Region: Grand Est
• City: Lauterbourg
• Coordinates: 48.97°N, 8.19°E
• Timezone: Europe/Paris

*Note: Historical observations indicate prior geolocation data pointing to Germany (München), suggesting possible routing anomalies or multi-region deployment.*

---

INFRASTRUCTURE CLASSIFICATION

• Type: Cloud Compute (Contabo)
• Hosting Provider: Yes
• Open Ports: None detected (Firewalled/No Services)
• DNS PTR: vmi3094049.contaboserver.net
• Forward Resolution: vmi3094049.contaboserver.net
• Service Purpose: Firewalled / No Services

---

THREAT ASSESSMENT

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Known Campaigns: None
• Threat Feeds: No matches

Threat Indicators: None detected

---

SUBNET ANALYSIS (31.220.74.0/24)

• Abuse Density: 0 (Low)
• Classification: mostly_clean
• Active Siblings: 1
• Threat Siblings: 1 (31.220.74.155, Risk Score: 25)
• Total Neighbors: 2

---

RELATIONSHIP GRAPH

1. DNS Association: vmi3094049.contaboserver.net

2. Same Network: TT-20230217 (31.220.72.0/21)

3. DNS Association: vmi3094049.contaboserver.net (confirmed)

---

OBSERVATION HISTORY (15 Total Observations)

• Most Recent: 2026-08-13
• Ownership Changes: 0
• Threat Persistence: None detected
• Persistently Malicious: No
• Operator Score: Basic (0.2609)
• Route Stability: Not stable
• DNSSEC Valid: Yes

---

RECOMMENDED ACTIONS

• Monitor: Standard monitoring recommended for cloud infrastructure
• Block: No block recommended
• Firewall Rules: No specific rules required
• Investigation Priority: Low

---

SOC ANALYST NOTES

This IP represents a standard Contabo VPS deployment with no active threat indicators. The zero blacklist count and absence of threat indicators support continued operation without defensive restrictions. The single threat sibling (31.220.74.155) in the /24 subnet should be monitored separately. No immediate action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.