66.94.103.120📋 Copy

# IP Intelligence Briefing: 66.94.103.120

## Executive Summary

IP address 66.94.103.120 was classified as Low Risk with a risk score of 30. The address is associated with Contabo Inc. (ASN 40021), a cloud computing infrastructure provider operating from the United States. No active threat indicators, campaign correlations, or blacklist listings were identified.

## Ownership and Infrastructure

The IP belongs to Contabo Inc. within the CONTA-48 network block (66.94.96.0/19). Infrastructure type is classified as cloud compute with web server service purpose. The address resolves to the hostname vmi3276336.contaboserver.net via forward DNS with confirmation. No email authentication records (SPF/DMARC) were present for the associated domain.

## Threat Assessment

Threat analysis yielded no malicious indicators:

• Abuse Confidence Score: Not applicable
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Blacklist Count: 0
• Threat Feeds: No matches

The control plane showed the address is not route-stable and has an operator score of 0.2609 (Basic). DNSSEC validation was confirmed valid.

## Network Context and Neighborhood

The /24 subnet (66.94.103.0/24) was assessed as clean with zero abuse density. Two neighboring IPs were identified:

• 66.94.103.35: Risk score 20, authority score 60
• 66.94.103.204: Risk score 25, authority score 60

All three active siblings in the subnet showed low-to-moderate risk profiles with no threat classifications.

## Service Exposure

The IP exposed five open services:

• Port 80/TCP (HTTP)
• Port 443/TCP (HTTPS)
• Port 22/TCP (SSH - OpenSSH_8.2)
• Port 8080/TCP (HTTP-alt)
• Port 8443/TCP (HTTPS-alt)

A Let's Encrypt TLS certificate was observed, issued for subject usa.sa9r.dpdns.org.

## Historical Observations

A total of 26 historical observations were recorded, with the most recent from August 13, 2026. Signal history included:

• Connection failures (HTTPS scheme)
• No ownership changes
• No threat persistence
• No persistent malicious behavior

Campaign correlation analysis returned none, with zero certificate matches, banner matches, or correlated IPs.

## Recommended Actions

No specific security actions were generated. The IP presents as legitimate cloud infrastructure hosting web services. Standard monitoring practices are recommended due to the hosting environment classification.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.