5.189.189.33📋 Copy

IP INTELLIGENCE BRIEFING

Target IP: 5.189.189.33/32

---

**EXECUTIVE SUMMARY**

IP 5.189.189.33 is a low-risk Contabo hosting server located in Germany, associated with the zyneventures.com domain. The IP presents minimal threat indicators and shows stable operational characteristics over the observation period.

---

**INFRASTRUCTURE PROFILE**

Network Classification:

• Provider: Contabo (ASN: 51167, RIR: RIPE)
• Organization: Johannes Selg
• Infrastructure Type: Cloud Computing / Web Hosting
• Network Role: Web Server (nginx/1.24.0 on Ubuntu)

Geolocation:

• Country: Germany (DE)
• Region/City: Grand Est, Lauterbourg
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin
• RTT: 106-111ms (5 probes)
• Geo Validation: Plausible (400km accuracy radius)

DNS Resolution:

• PTR Hostname: vmi3102423.contaboserver.net
• Forward Resolution: Forward confirmed to same hostname
• Domain: contaboserver.net
• HTTP Status: 404 Not Found

---

**THREAT ASSESSMENT**

Risk Score: 25 (Low Risk)

• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: Not applicable

Threat Indicators:

• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False

Control Plane:

• BGP Prefix: 5.189.176.0/20
• Route Stability: Unstable (route changes in 30d: 0)
• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.2609 (Basic)

---

**NEIGHBORHOOD ANALYSIS**

Subnet: 5.189.189.33/24

• Abuse Density: 1 (Low)
• Classification: Mostly Clean
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 2 (Historical)

Neighbor IP Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 1

Notable Neighbor: 5.189.189.216 (Risk Score: 0)

---

**OBSERVATION HISTORY**

Total Observations: 25 signals over monitoring period

Key Historical Signals:

• June 2026: Multiple observations confirming cloud/hosting infrastructure, HTTPS configuration, and DNS records
• HTTP Fingerprint: nginx/1.24.0 (Ubuntu), HTTP/1.1 only
• TLS Certificate: Let's Encrypt (CN=al-v2.zyneventures.com)
• DNS Records: SPF and DMARC configured for zyneventures.com domain
• Subnet Classification: Consistently "mostly_clean" with low inherited risk (5)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence: 0 days
• Persistent Malicious Activity: False

---

**RELATED ENTITIES**

DNS Associations:

• vmi3102423.contaboserver.net (multiple associations)

Network Associations:

• CONTABO (same network)

---

**SECURITY RECOMMENDATIONS**

Risk Score: 25 (Low Risk)

Recommended Actions: None required at this time

Monitoring Considerations:

• IP shows standard web server behavior with no malicious indicators
• Historical data indicates consistent low-risk classification
• No firewall rules required based on current risk profile

Actionable Intelligence: This IP represents a legitimate Contabo hosting instance with no current threat indicators. Standard monitoring practices apply. No blocking or firewall rules recommended.

---

Report Generated: Based on full profile, history, relationships, and neighborhood analysis

Risk Classification: Low Risk

Confidence Level: High

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.