169.58.72.251
# IP Intelligence Briefing: 169.58.72.251
## Executive Summary
IP 169.58.72.251 is a low-risk address operating on Contabo infrastructure in Germany. The IP hosts a standard web server with minimal threat indicators and no persistent malicious activity detected.
## Profile Assessment
- Risk Score: 25 (Low Risk)
- Provider: Contabo (ASN 51167)
- Organization: Johannes Selg
- CIDR Block: 169.58.0.0/17
- Geolocation: DE (Germany)
- Reputation: Low Risk
## Technical Indicators
- DNS Resolution: vmi3464611.contaboserver.net
- Open Ports: 80/TCP (HTTP), 22/TCP (SSH)
- Server Fingerprint: Microsoft-IIS/10.0 with ASP.NET application framework
- HTTP Status: 200 OK, Response time: 964ms
- Security Headers: No HSTS, no CSP, no referrer policy implemented
## Threat Intelligence
- Threat Indicators: None detected
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Status: 0 blacklists (1 DNSBL listing out of 8 total checks)
- Known Campaigns: None
## Network Context
- Subnet Classification: Mostly clean (169.58.72.0/24)
- Abuse Density: 1
- Threat Siblings: 1
- Active Siblings: 0
- Route Stability: Not stable (isRouteStable: false)
## Observation History
- Total Observations: 21 signals recorded
- Recent Activity: 2026-08-06
- Threat Observation Count: 1
- Persistence Status: Not persistently malicious
## Relationship Graph
The IP maintains associations primarily within the Contabo network (TT-20260630) and DNS hostname (vmi3464611.contaboserver.net). No external organizational or certificate relationships identified.
## Recommended Actions
No specific blocking or mitigating actions required. Standard monitoring practices apply:
- Monitor for changes in DNS records or new open ports
- Track any emerging threat indicators
- Review for any new blacklisting events
## Conclusion
IP 169.58.72.251 represents a standard Contabo VPS instance with minimal security concerns. The low risk score, absence of threat indicators, and clean neighborhood assessment support routine traffic handling without special restrictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | TT-20260630 |
| CIDR Block | 169.58.0.0/17 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vmi3464611.contaboserver.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vmi3464611.contaboserver.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | — |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Microsoft-IIS/10.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 45% | 2 | 5 |
| routing | 17% | 1 | 1 |
| services | 38% | 2 | 4 |
| ownership | 35% | 2 | 3 |
| reputation | 31% | 1 | 4 |
| geolocation | 17% | 1 | 1 |
| Overall | 30% | 9 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-31 13:31:43 UTC |
| Last Seen | 2026-08-13 01:35:34 UTC |
| Profile Built | 2026-08-13 01:46:02 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 25 |
Full dossier details are available via our API.