173.249.27.189📋 Copy

# IP INTELLIGENCE BRIEFING: 173.249.27.189/32

Classification: Low Risk

Risk Score: 25

Report Date: 2026-06-27

## Executive Summary

IP 173.249.27.189 is classified as low risk with a risk score of 25. The address is assigned to Contabo (ASN 51167) as cloud hosting infrastructure located in Lauterbourg, Germany. No active threat indicators, campaigns, or malicious activity were detected during analysis.

## Ownership and Infrastructure

• Organization: Johannes Selg
• ASN: 51167 (Contabo)
• RIR: ARIN
• Infrastructure Type: Cloud Compute
• Connection Type: Hosted/Virtual Machine
• DNS Resolution: vmi3097878.contaboserver.net

## Geolocation Data

• Country: Germany (DE)
• Region: Grand Est
• City: Lauterbourg
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin
• Accuracy Radius: 400km

## Threat Assessment

Threat Indicators: None detected

• Abuse Confidence Score: Not applicable
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Blacklist Count: 0
• Known Campaigns: None

DNSBL Status: Listed on 1 of 8 total DNSBL lists

Control Plane: DNSSEC valid; BGP prefix 173.249.26.0/23

## Network Classification

• Provider: Contabo
• Infrastructure Role: Cloud hosting / Virtual machine
• Open Ports: None detected (firewalled/no services)
• Network Classification: Cloud compute infrastructure

## Subnet Neighborhood Analysis

Subnet: 173.249.27.189/24

• Abuse Density: 1 (low)
• Classification: Mostly clean
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1

No concerning patterns observed within the /24 neighborhood.

## Observation History

Analysis of 24 historical observations indicates stable, low-risk behavior:

• Latest Observation (2026-06-27): Minimal threat classification, 0 raw score
• Previous Observation (2026-06-19): Basic classification, 0.3 operator score
• Threat Persistence: 0 days
• Status: Not persistently malicious

No significant threat escalation detected over the observation period.

## Recommended Security Actions

Action Priority: Monitor

• Risk Level: Low
• Recommended Action: No immediate blocking required. Standard network hygiene applies.
• Firewall Rules: Not generated (risk score below threshold)

## Intelligence Narrative

IP 173.249.27.189 represents Contabo cloud hosting infrastructure deployed in Germany. The address resolves to a virtual machine instance (vmi3097878.contaboserver.net) with no open services detected, indicating proper firewall hardening. Threat intelligence feeds show no malicious activity, campaign associations, or attacker signatures. The IP maintains consistent low-risk behavior across observation periods with zero threat persistence.

The subnet demonstrates minimal abuse density with only one active sibling IP. While listed on one DNSBL, this is an isolated occurrence without correlation to active threat campaigns. The IP's classification as cloud compute hosting aligns with legitimate infrastructure usage patterns for Contabo services.

Assessment: This IP presents no immediate threat to network security and may be allowed with standard network monitoring. No blocking or mitigation actions are recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.