62.171.133.102
## IP Intelligence Briefing: 62.171.133.102/32
Classification: Moderate Risk | Risk Score: 50 | Last Updated: 2026-08-13
---
Executive Summary
IP 62.171.133.102 is a Contabo cloud hosting server located in Frankfurt am Main, Germany. The address resolves to a VPS instance (vmi3173054.contaboserver.net) hosting standard web services with elevated neighborhood abuse density (0.5). The IP is listed on 2 of 8 DNS blacklist entries and is associated with 1 active sibling in the /24 subnet. No persistent malicious activity detected.
---
Technical Profile
- Organization: CONTABO (AS51167)
- Location: Frankfurt am Main, Hesse, Germany (DE)
- Infrastructure Type: Cloud Computing / Web Server
- Open Ports: 80/TCP (HTTP), 443/TCP (HTTPS), 22/TCP (SSH)
- Server Banner: Caddy web server
- DNS Hostname: vmi3173054.contaboserver.net
---
Threat Indicators
- DNSBL Listed: 2 of 8 lists (moderate reputation concern)
- Abuse Confidence: Data insufficient for definitive assessment
- Known Campaigns: None identified
- Threat Persistence: No persistent malicious activity observed
- Neighborhood Context: 62.171.133.156 (risk score 25) shares /24 subnet
---
Historical Observations
19 observations recorded. Recent activity includes connection attempts and port scans (ports 80, 443, 22). Geolocation data remains consistent with Frankfurt region (claimed latitude 51.17, longitude 10.45). No significant risk trajectory changes detected over observation period.
---
Recommended Actions
No automatic recommendations triggered. Manual blocking advised if traffic patterns align with observed threat indicators:
Firewall Rules:
- iptables: `iptables -A INPUT -s 62.171.133.102 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 62.171.133.102 drop`
- Cloudflare WAF: Block IP with filter expression `ip.src eq 62.171.133.102`
---
Intelligence Notes
The IP operates within a shared hosting environment (Contabo) with moderate neighborhood abuse density. The combination of standard web ports (80/443) and SSH access suggests potential for abuse but also legitimate web hosting. Monitor for correlation with other suspicious traffic patterns from the 62.171.133.0/24 subnet.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | CONTABO |
| CIDR Block | 62.171.128.0/19 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vmi3173054.contaboserver.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vmi3173054.contaboserver.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Caddy |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 31% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 31% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 28% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-12 06:13:02 UTC |
| Last Seen | 2026-08-30 21:24:31 UTC |
| Profile Built | 2026-08-30 23:03:21 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 28 |
Full dossier details are available via our API.