IPDebrief

84.247.133.241

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# INTELLIGENCE BRIEFING: 84.247.133.241/32

Classification: Low Risk / Cloud Infrastructure

Date Generated: 2026-07-30

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP 84.247.133.241 is a low-risk virtual machine endpoint hosted on Contabo cloud infrastructure (ASN 51167, Germany). The address exhibits minimal threat indicators with a risk score of 25/100, no active services, and no association with known malicious campaigns. The subnet (84.247.133.0/24) demonstrates moderate abuse density (0.33), with the target IP residing in a "mostly_clean" classification environment.

---

## Technical Profile

AttributeValue
**IP Address**84.247.133.241/32
**ASN**51167
**Organization**Johannes Selg
**Network Name**TT-20240111
**Country**DE (Germany)
**Geolocation**Latitude: 51.17, Longitude: 10.45
**Infrastructure Type**CloudCompute
**Provider**Contabo
**Reputation Score**25/100 (Low Risk)
**DNS Hostname**vmi2880230.contaboserver.net

---

## Threat Intelligence Assessment

Risk Indicators

Network Services

DNS Analysis

---

## Neighborhood Analysis

The IP resides within subnet 84.247.133.0/24, which shows:

Neighbor Risk Distribution:

The neighborhood context indicates this IP operates in a mixed environment with minimal overall threat concentration.

---

## Historical Observation Summary

Analysis of 15 historical observations reveals consistent profile characteristics:

The temporal profile shows stability with no degradation in risk posture over the observation period.

---

## Relationship Graph

The IP demonstrates associations with:

No cross-referenced malicious entities, campaigns, or certificate associations detected.

---

## Recommended Actions

Based on current risk assessment, no immediate blocking actions are warranted. The IP presents as:

Monitoring Recommendation: Continue passive monitoring. The IP maintains a low-risk profile consistent with legitimate cloud hosting usage.

---

## Intelligence Confidence

This assessment is based on comprehensive multi-signal analysis including:

Confidence Level: Moderate (Risk Profile: Low Risk)

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
Regionโ€”
CityParis
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

๐Ÿข Ownership & Registration

OrganizationJohannes Selg
ASNAS51167
Network NameTT-20240111
CIDR Block84.247.128.0/20
RIRRIPE
CountryDE
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRvmi2880230.contaboserver.net
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesvmi2880230.contaboserver.net

๐Ÿ” DNS Hygiene

Hygiene Score60% (Good)
SPF0/2 domains
DMARC1/2 domains
FCrDNSVerified
DNSSECValid
CAANot configured
Domains Checked2 domains

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierTier 3 โ€” Basic operator with some routing infrastructure
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Servernginx/1.24.0 (Ubuntu)
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18

๐Ÿ” TLS Certificate

๐Ÿ”’
CN=modularpos.es
Issued by CN=YE2, O=Let's Encrypt, C=US
Self-signed: No
SANsmodularpos.eswww.modularpos.es
Valid From2026-08-07T05:09:19+00:00
Valid Until2026-11-05T05:09:18+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha384ECDSA
Validity Period89 days
Serial Number0616CD9BED3D42A074B08B72C80F2FB9DD0D
ThumbprintFFE58C58F83220EA532696F4105A74128E812FA8

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
21%
22
routing
13%
11
services
21%
22
ownership
27%
23
reputation
17%
12
geolocation
27%
23
Overall21%1013
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) โ€” 1 contradiction(s)
AttributionModerate (55%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
โš  Geo sources disagree on country: FR, DE

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-29 16:42:30 UTC
Last Seen2026-08-13 00:00:26 UTC
Profile Built2026-08-13 00:10:08 UTC
Data FreshnessLive
Signal Types23
Total Observations26
๐Ÿ” 23 signal types ยท 26 observations collected
This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.