IPDebrief

173.249.49.39

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

INTELLIGENCE BRIEFING: 173.249.49.39/32

Classification: LOW RISK / MONITOR

Date: 2026-08-06

Prepared By: IPDebrief Intelligence Unit

---

EXECUTIVE SUMMARY

IP address 173.249.49.39 is associated with Contabo infrastructure in Germany. The IP exhibits low-risk characteristics with a risk score of 25. No active threat indicators, blacklist hits, or malicious campaign associations were detected. The address represents a standard cloud VPS deployment with no open services observed.

---

OWNERSHIP & INFRASTRUCTURE

AttributeValue
**ASN**51167 (Johannes Selg)
**Organization**CONTABO
**CIDR Block**173.249.32.0/19
**Network Type**Provider / Hosting
**Country**Germany (DE)
**Registration**ARIN

The IP is assigned to Johannes Selg's CONTABO network, a legitimate German hosting provider. The address resolves to a virtual machine instance (vmi2459828.contaboserver.net) indicating VPS infrastructure.

---

RISK PROFILE

Overall Risk Score: 25/100 (Low Risk)

MetricValueAssessment
ReputationLow RiskAcceptable
Provider Score0Baseline
Authority Score0Baseline
Stability Score0N/A
Abuse ConfidenceN/ANot Flagged
Blacklist Count0Clean

Threat Indicators: None detected. No Tor exit, known attacker, spam source, or campaign associations identified.

---

NETWORK CHARACTERISTICS

CharacteristicStatus
**Open Ports**None detected
**DNS Resolution**Forward confirmed
**PTR Record**vmi2459828.contaboserver.net
**Services**Firewalled / No services exposed
**CDN/Proxy/VPN**Not identified
**AnyCast**Not enabled

The IP is actively firewalled with no accessible services, reducing attack surface exposure.

---

OBSERVATION HISTORY

Total Observations: 16 signals recorded

Key Temporal Indicators:

Geolocation Signals:

Network Performance:

The IP demonstrates stable characteristics with no degradation in quality or emergence of threat patterns over the observation period.

---

RELATIONSHIP ANALYSIS

Connected Entities: 5 relationships identified

Relationship TypeTarget
DNS Associationvmi2459828.contaboserver.net
Same NetworkCONTABO
DNS Associationvmi2459828.contaboserver.net
Same NetworkCONTABO
DNS Associationvmi2459828.contaboserver.net

No certificate associations or organizational links beyond the hosting provider were discovered. The IP operates in isolation without known peer infrastructure.

---

SUBNET ANALYSIS

Network: 173.249.49.0/24

The /24 subnet shows zero abuse activity, with no threat-adjacent neighbors identified.

---

CONTROL PLANE DATA

MetricValue
BGP Prefix173.249.48.0/23
Origin ASN51167
Route StabilityFalse
Route Changes (30d)0
DNSSECValid
DNSBL Listed1 of 8 lists
Operator Score0.2609 (Basic)

---

RECOMMENDATIONS

Security Posture: ACCEPTABLE

1. Allow Traffic: No blocking required. The IP exhibits benign characteristics consistent with legitimate hosting infrastructure.

2. Monitoring: No enhanced monitoring required. Maintain standard logging practices.

3. Firewall Rules: No specific deny rules recommended. Standard provider-based filtering applies.

4. Threat Intelligence: No correlation with known campaigns or threat actors.

---

CONCLUSION

IP 173.249.49.39 represents a low-risk Contabo VPS instance with no malicious indicators. The address demonstrates stable network characteristics, clean reputation, and no association with threat infrastructure. No defensive actions beyond standard operational procedures are recommended.

Final Risk Assessment: LOW RISK โ€“ No action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
RegionGrand Est
CityLauterbourg
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

๐Ÿข Ownership & Registration

OrganizationJohannes Selg
ASNAS51167
Network NameCONTABO
CIDR Block173.249.32.0/19
RIRARIN
CountryDE
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRvmi2459828.contaboserver.net
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesvmi2459828.contaboserver.net

๐Ÿ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSVerified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeMulti-Service Host
Network TierTier 3 โ€” Basic operator with some routing infrastructure
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
22sshtcp
Closed Ports25, 443, 3389, 8080, 8443 (2 open / 7 scanned)
Servernginx/1.29.4
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
35%
23
routing
17%
11
services
35%
23
ownership
35%
23
reputation
17%
12
geolocation
35%
23
Overall29%1015
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-08-05 18:27:58 UTC
Last Seen2026-08-13 07:59:48 UTC
Profile Built2026-08-13 08:12:45 UTC
Data FreshnessLive
Signal Types21
Total Observations21
๐Ÿ” 21 signal types ยท 21 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.