IPDebrief

86.48.30.101

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## Intelligence Briefing: 86.48.30.101/32

Classification: LOW RISK – Cloud Infrastructure Endpoint

Assessment Date: 2026-07-22

Analyst: IPDebrief SOC Intelligence Unit

---

Executive Summary

IP address 86.48.30.101 is a low-risk cloud computing endpoint belonging to Contabo (ASN: 40021, Organization: Johannes Selg, Netname: TT-20220523). The asset operates within the 86.48.16.0/20 CIDR block under RIPE NCC. Current risk score is 25, with no active threat indicators or malicious activity observed. No actionable firewall rules required.

---

Ownership and Infrastructure Profile

AttributeValue
**ASN**40021 (Contabo)
**Organization**Johannes Selg
**Netname**TT-20220523
**CIDR Block**86.48.16.0/20
**RIR**RIPE
**Infrastructure Type**CloudCompute
**Classification**Firewalled / No Services

Geolocation:

---

Network Behavior and Services

Network Classification Flags:

---

Threat Indicators and Reputation

MetricValueStatus
**Risk Score**25LOW
**Abuse Confidence Score**N/AN/A
**Blacklist Count**0Clean
**DNSBL Listed**1 of 8 listsMinimal
**Is Known Attacker**falseClean
**Is Spam Source**falseClean
**Tor Exit Node**falseClean
**Campaign Matches**0None

Threat Feeds: No indicators in Pulsedive or other threat feeds.

---

Neighborhood Analysis

Subnet: 86.48.30.101/24

The /24 subnet demonstrates no malicious activity. No neighboring IPs flagged for abuse or threat.

---

Relationship Graph

Identified Associations:

All relationships indicate standard cloud infrastructure DNS and network block associations. No unusual or suspicious connections identified.

---

Historical Observation Trends

Total Observations: 20 signals tracked

Recent Activity (2026-07-22):

Temporal Assessment: No evidence of malicious activity over observation period. IP maintains stable ownership and clean classification.

---

Control Plane and Routing

MetricValue
**Origin ASN**40021
**BGP Prefix**86.48.28.0/22
**Route Stability**Not stable
**Route Changes (30d)**0
**RPKI State**Not assessed
**DNSSEC Valid**true
**Hop Count (Traceroute)**30 hops
**Transit Networks**Comcast, Lumen

---

Recommended Actions

Current Risk Profile: LOW RISK (Score: 25)

Actionable Recommendations: None required at this time.

Firewall Rules: No blocking or filtering rules recommended.

SOC Guidance:

---

Conclusion

IP address 86.48.30.101 is a Contabo cloud computing endpoint with no active threat indicators. The asset demonstrates clean reputation metrics, no blacklist associations, and operates within a low-abuse-density subnet. Historical data confirms persistent benign behavior. This IP warrants standard network monitoring but does not require special threat handling or blocking actions.

Confidence Level: High (comprehensive profile, clean history, no threat indicators)

Last Updated: 2026-07-22

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇺🇸 United States
RegionNew York
CityOrangeburg
Timezone—
Latitude41.04
Longitude-73.96

🏢 Ownership & Registration

OrganizationJohannes Selg
ASNAS40021
Network NameTT-20220523
CIDR Block86.48.16.0/20
RIRRIPE
CountryUS
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRvmi3341387.contaboserver.net
Forward ConfirmedYes — FCrDNS verified
Forward Hostnamesvmi3341387.contaboserver.net

🔐 DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSVerified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting — Infrastructure provider without advanced routing
CloudHosting

🔌 Services & Open Ports

PortServiceProtocolBanner
80httptcp—
443httpstcp—
22sshtcpBanner detected
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
ServerWeb server detected
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🛡️ Public Network Snapshot

Origin ASNAS40021
Network Prefix86.48.28.0/22
Route mappingFound
Certificates in transparency logs0 certificates

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
43%
25
routing
8%
11
services
24%
23
ownership
20%
23
reputation
22%
13
geolocation
27%
23
Overall24%1018
Coverage: 6/6 dimensions · Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-07-02 04:22:19 UTC
Last Seen2026-08-27 14:52:53 UTC
Profile Built2026-08-29 04:19:12 UTC
Data FreshnessLive
Signal Types26
Total Observations28
🔍 26 signal types · 28 observations collected
This report is generated from 26+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 86.48.30.101

Who owns the IP address 86.48.30.101?

86.48.30.101 is registered to Johannes Selg. The address falls within the 86.48.16.0/20 network block. Registration is held at RIPE.

Where is 86.48.30.101 located?

Geolocation data places 86.48.30.101 in Orangeburg, New York, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 86.48.30.101 malicious or safe?

86.48.30.101 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 86.48.30.101?

The reverse DNS (PTR) record for 86.48.30.101 is vmi3341387.contaboserver.net. This hostname is forward-confirmed, meaning it resolves back to the same address.

What ports are open on 86.48.30.101?

Responsive ports observed on 86.48.30.101 include 80, 443, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.

Is 86.48.30.101 a VPN, proxy, or data center address?

86.48.30.101 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.

🏘️ Related IP Addresses

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.