173.249.31.64📋 Copy

# IP Intelligence Briefing: 173.249.31.64/32

Classification: Low Risk

Report Date: Current

Status: Active Monitoring

## Executive Summary

IP address 173.249.31.64 is a low-risk Contabo cloud hosting infrastructure endpoint located in Lauterbourg, Grand Est, Germany. The IP exhibits no malicious indicators, maintains a risk score of 25/100, and presents as a standard virtual machine instance with no active services. No immediate defensive action required.

## Technical Profile

## Threat Assessment

Malicious Activity Indicators:

• Blacklist Count: 0
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• Known Campaigns: None detected
• Abuse Confidence Score: Not applicable

Control Plane Data:

• BGP Prefix: 173.249.30.0/23
• Route Stability: False
• DNSBL Listed: 1/8 lists
• RPKI State: Not verified
• IRR Consistency: Not verified

## Network Neighborhood Analysis

Subnet: 173.249.31.64/24

• Abuse Density: 0.5 (moderate)
• Classification: Mostly Clean
• Total Siblings: 4
• Active Siblings: 1
• Threat Siblings: 2
• Inherited Risk: 5

Neighbor IPs:

• 173.249.31.31: Risk 25, Authority 60
• 173.249.31.93: Risk 25, Authority 60
• 173.249.31.159: Risk 25, Authority 60

All neighboring IPs maintain low-risk profiles consistent with the primary subject.

## Observation History

Total Observations: 19 signals

Recent Activity: 2026-06-17 (most recent)

Threat Persistence: 0 days (no persistent malicious activity)

Ownership Changes: 0

Historical signal analysis indicates stable network characteristics with no escalation in risk profile. Signal types observed include operator scoring, routing analysis, service enumeration, ownership verification, reputation assessment, and geolocation confirmation.

## Entity Relationships

Detected Relationships: 40

• Network Associations: Multiple CONTABO network references
• DNS Associations: vmi433744.contaboserver.net

No anomalous relationships detected between this IP and known threat actors, campaigns, or malicious infrastructure.

## Recommended Actions

Security Posture: Standard monitoring

Firewall Rules: None required (low risk)

Threat Blocking: Not recommended

The IP address demonstrates characteristics consistent with legitimate cloud hosting infrastructure. No immediate blocking or mitigation actions warranted based on current threat intelligence.

## Analyst Notes

This Contabo hosting IP represents typical cloud infrastructure behavior with no indicators of compromise. The absence of open ports, combined with low-risk scoring and clean threat feed associations, supports classification as benign network traffic. Continue routine monitoring but no escalation required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.