5.182.33.92📋 Copy

IP INTELLIGENCE BRIEFING: 5.182.33.92/32

OVERVIEW

IP 5.182.33.92 is a low-risk (risk score: 25) cloud infrastructure address registered to Contabo (ASN 51167) in Lauterbourg, France. The asset operates as a web hosting server with Apache/2.4.58 serving HTTP/HTTPS traffic on ports 80, 443, and SSH on port 22. DNS resolution points to vmi3273861.contaboserver.net with TLS certificate issued by Let's Encrypt for portal.examtech.org. RPKI validation is valid with route stability confirmed.

OWNERSHIP & GEOLOCATION

• ASN: 51167 (Contabo)
• Organization: Johannes Selg
• Country: Germany (DE)
• Region: Grand Est, Lauterbourg
• RIR: RIPE
• Delegation Age: 5,830 days
• IP Classification: CloudCompute, Hosting

THREAT ASSESSMENT

• Reputation: Low Risk
• Abuse Confidence Score: Not elevated
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Campaign Likelihood: None
• Threat Persistence: 0 days
• Is Persistently Malicious: No

NEIGHBORHOOD ANALYSIS (5.182.33.0/24)

• Subnet Abuse Density: 0
• Classification: mostly_clean
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 2
• Neighbor Risk Distribution: 1 low-risk (5.182.33.212, risk score 25)
• Inherited Risk: 5

OBSERVATION HISTORY

Total observations: 29. Recent signals (as of 2026-06-14) indicate consistent provider attribution to Contabo with abuse density of 1 and classification of "mostly_clean." Route operator score: 0.8261 (Professional). HTTP fingerprint shows Apache 2.4.58 with Next.js-powered content, HSTS disabled, HTTP/1.1 protocol only.

RELATIONSHIPS

54 relationship records identified including DNS associations to vmi3273861.contaboserver.net and network associations to TT-2021120401. Multiple hostname associations indicate this is a standard VMI (Virtual Machine Instance) from Contabo infrastructure.

RECOMMENDED ACTIONS

No specific firewall rules or blocking actions recommended. The IP presents a low-risk profile with no active threat indicators. Standard network monitoring is appropriate. No immediate defensive measures required.

ASSESSMENT

This IP address represents normal cloud hosting infrastructure with no observable malicious activity. The low risk score (25), absence of blacklist entries, and clean neighborhood metrics support continued operation without special mitigation. SOC analysts may monitor for changes in threat indicators but no immediate action is warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.