5.189.149.221📋 Copy

# IP Intelligence Briefing: 5.189.149.221

Date: 2026-06-19

Classification: Low Risk

Risk Score: 25/100

---

## Executive Summary

IP 5.189.149.221 is a low-risk cloud hosting address operated by Contabo (ASN 51167). The IP resolves to a virtual machine (VMI2764289.contaboserver.net) and shows no active threat indicators. Current risk assessment indicates minimal concern, though historical data reveals occasional blacklist associations.

---

## Network Ownership & Classification

---

## Technical Profile

DNS Resolution:

• Forward: vmi2764289.contaboserver.net (contaboserver.net)
• PTR Record: vmi2764289.contaboserver.net
• Forward Confirmed: Yes

Network Role:

• Cloud Hosting: Yes
• CDN: No
• VPN/Proxy/Tor: No
• Mobile/Residential: No
• Bogon: No
• Anycast: No

Services:

• Open Ports: None detected
• HTTP/TLS: No active services
• Firewall Status: Active (no services exposed)

---

## Threat Assessment

Current Status:

• Risk Score: 25 (Low)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threat Indicators: None

Blacklist Status:

• DNSBL Lists: 1 of 8 total
• Blacklist Count: 0
• Abuse Confidence Score: Not applicable

Behavioral Analysis:

• Threat Persistence: No
• Persistently Malicious: No
• Campaign Correlation: None

---

## Observation History

Total observations: 22 signals collected.

Recent Activity (June 2026):

• 2026-06-19: Basic routing signals observed (confidence: 0.60)
• 2026-06-19: Comprehensive profile signal (confidence: 0.23)
• 2026-06-14: Network classification confirmed as Contabo cloud infrastructure
• 2026-06-14: Blacklist listing observed with "high" severity (1 of 8 lists)
• 2026-06-14: Geolocation inferred for DE (confidence: 0.52)

Temporal Analysis:

• Ownership changes: 0
• Threat observation count: 0
• No persistent malicious behavior detected

---

## Relationship Graph

Associated Entities:

• DNS Associations: vmi2764289.contaboserver.net (multiple entries)
• Network Affiliation: CONTABO
• Total Relationships: 42

Network Context:

• Same Network Classification: Contabo infrastructure
• No certificate associations
• No organizational links beyond Contabo

---

## Neighborhood Analysis

Subnet: 5.189.149.221/24

• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 0
• High-Risk Neighbors: 0

The /24 subnet shows no adjacent threat activity, indicating this IP operates in isolation within the Contabo infrastructure.

---

## Recommended Actions

Current Risk Level: Low

Monitoring Priority: Standard

Recommended Firewall Rules:

• No immediate blocking required
• Standard logging recommended for traffic analysis
• Consider monitoring for service exposure changes

SOC Analyst Notes:

• IP is properly classified as cloud hosting with appropriate firewalling
• Historical blacklist exposure (2026-06-14) did not persist
• No active threat intelligence correlates found
• Routine monitoring advised; no urgent threat response required

---

Report Generated: IPDebrief Intelligence Platform

Data Sources: Contabo RIR, RDAP, DNSBL, Multi-signal Inference

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.