# IP Intelligence Briefing: 62.169.26.200/32
## Executive Summary
IP 62.169.26.200 is classified as Moderate Risk (50/100) and is associated with Contabo cloud infrastructure in Germany. The IP operates as a cloud computing host with no open services and has no active threat indicators. Network neighborhood analysis shows clean subnet characteristics with low abuse density.
## Ownership & Infrastructure
| Attribute | Value |
|---|---|
| ASN | 51167 (Contabo) |
| Organization | Johannes Selg / TT-20240404 |
| Network | 62.169.24.0/21 |
| Country | DE |
| Infrastructure Type | CloudCompute |
| Hosting Provider | Contabo |
## Network Classification
- Cloud Provider: Yes
- CDN: No
- VPNs/Proxy: No
- Tor Exit Node: No
- Mobile/Residential: No
- Service Status: Firewalled / No Services Detected
## DNS Resolution
- PTR Record: vmi3183407.contaboserver.net
- Forward Resolution: Confirmed
- Email Auth: SPF/DMARC not configured
## Threat Indicators
- Blacklist Status: 0 direct blacklists, 2 DNSBL listings
- Abuse Confidence: Not scored
- Known Campaigns: None identified
- Threat Persistence: Not persistently malicious
## Neighborhood Analysis (62.169.26.200/24)
- Subnet Classification: Clean
- Abuse Density: 0.0
- Total Siblings: 2 active IPs
- Threat Siblings: 0
- Neighbor Risk Profile: One neighbor (62.169.26.37) shows low risk score (25)
## Historical Observations
21 observations recorded. Recent signals indicate consistent cloud infrastructure classification with no emerging threat patterns. Operator score remains at basic level (0.2609). No significant changes in geolocation, DNS, or threat profile over observation period.
## Recommended Actions
Based on risk score of 50, defensive measures are recommended but should be evaluated in context:
| System | Action |
|---|---|
| iptables | `iptables -A INPUT -s 62.169.26.200 -j DROP` |
| nftables | `nft add rule inet filter input ip saddr 62.169.26.200 drop` |
| Cloudflare WAF | Block IP with filter `ip.src eq 62.169.26.200` |
| AWS WAF | Add IP to deny list: `62.169.26.200/32` |
## Analyst Notes
The IP resolves to a Contabo virtual machine (vmi3183407.contaboserver.net). While the risk score is moderate, the subnet exhibits clean characteristics with no observed malicious activity from neighboring IPs. The lack of open services suggests the IP may be dormant or protected by host-level firewalling. Monitoring is recommended for any service emergence or threat signal changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | TT-20240404 |
| CIDR Block | 62.169.24.0/21 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vmi3183407.contaboserver.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vmi3183407.contaboserver.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-05 12:20:42 UTC |
| Last Seen | 2026-08-13 07:42:52 UTC |
| Profile Built | 2026-08-13 07:56:53 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 24 |
Full dossier details are available via our API.