173.249.44.212📋 Copy

# IP Intelligence Briefing: 173.249.44.212/32

## Executive Summary

IP address 173.249.44.212 is a low-risk cloud computing endpoint hosted within the CONTABO infrastructure. Current threat assessment indicates minimal malicious activity with a risk score of 25/100. No active attack campaigns or persistent malicious behavior observed.

## Technical Profile

Ownership & Registration

• ASN: 51167 (CONTABO GmbH)
• Organization: Johannes Selg / CONTABO
• Network Block: 173.249.32.0/19
• RIR: ARIN

Geolocation

• Country: Germany (DE)
• Region: Bavaria (BY)
• City: Nuremberg
• Coordinates: 51.17°N, 10.45°E

Network Classification

• Infrastructure Type: Cloud Compute / Hosting
• Services: HTTP/HTTPS (ports 80, 443), SSH (port 22)
• DNS: vmi2506708.contaboserver.net
• TLS Certificate: Let's Encrypt (whm.marhel.co.mz)

## Threat Assessment

Current Risk Profile

• Risk Score: 25/100 (Low Risk)
• Abuse Confidence Score: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

Threat Indicators

• Blacklist Count: 0
• Active Threat Indicators: None
• Known Campaigns: None
• DNSBL Listings: 1 out of 8 total lists
• Pulsedive Risk: Not flagged

## Historical Analysis

Observation history contains 24 data points spanning multiple time periods. Key temporal findings:

• Most recent signal (2026-06-29): Threat indicators detected with pulse count of 2
• Earlier observations (2026-06-21): Classified as "mostly clean" subnet
• Ownership changes: 0 (stable ownership)
• Threat persistence: Not persistently malicious

## Network Neighborhood

Subnet 173.249.44.0/24 analysis:

• Abuse Density: 0
• Classification: Mostly clean
• Threat siblings: 1
• Inherited risk score: 2

## Related Entities

• Primary network association: CONTABO
• DNS associations: vmi2506708.contaboserver.net
• Total relationships: 36 (primarily network and DNS associations)

## Security Recommendations

Current risk profile does not warrant blocking or restrictive firewall rules. However, SOC teams should:

• Monitor for any escalation in threat indicators
• Verify legitimate business purpose if traffic originates from this IP
• Consider contextual analysis based on traffic patterns rather than IP reputation alone

Classification: LOW RISK — No immediate action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.