IPDebrief

62.171.188.144

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP Intelligence Briefing: 62.171.188.144/32

Assessment Date: August 2026

Risk Classification: Moderate Risk (Score: 50)

Provider: Contabo (ASN 51167)

Ownership and Infrastructure

The IP address is registered to Johannes Selg under the CONTABO organization (netname: CONTABO) within the RIPE RIR. The address belongs to the 62.171.160.0/19 CIDR block and operates as cloud compute infrastructure with web server services. The IP resolves to hostname vmi3043351.contaboserver.net with forward DNS confirmation enabled.

Geolocation and Network Position

Primary geolocation data indicates the address is located in Lauterbourg, France (Grand Est region), with coordinates at latitude 48.97, longitude 8.19. Control plane data shows the address participates in BGP prefix 62.171.188.0/23, though route stability is marked as false.

Network Services

The target hosts standard web services on ports 80 (HTTP) and 443 (HTTPS). The server banner indicates a Caddy web server is running. No TLS certificate data was captured during observation.

Threat Indicators

Current threat profile shows zero known campaigns and no designation as known attacker or Tor exit node. However, the address maintains two listings across eight DNS blacklists (dnsblListedCount: 2). Abuse confidence scoring is unavailable. The operator score is rated as "Basic" at 0.2609.

Neighborhood Analysis

The /24 subnet (62.171.188.0/24) exhibits abuse density of 0.25, classified as "mostly_clean." Of 256 possible addresses, 3 are active with one identified as a threat sibling. Neighboring IP addresses include:

Historical Observations

Eighteen historical observations were collected. Recent signals (August 2026) include:

Recommended Security Actions

Based on the risk profile, the following firewall rules are recommended:

PlatformRule
iptables`iptables -A INPUT -s 62.171.188.144 -j DROP`
nftables`nft add rule inet filter input ip saddr 62.171.188.144 drop`
nginx`deny 62.171.188.144;`
pfSense`62.171.188.144/32`
Cloudflare WAFBlock with expression: `ip.src eq 62.171.188.144`
AWS WAFAddress: 62.171.188.144/32

Intelligence Summary

The IP address 62.171.188.144 operates as a Contabo cloud compute web server with moderate risk designation. While not currently flagged as a known attacker, the presence of DNSBL listings and moderate neighborhood abuse density warrants monitoring. The address shows geo-inconsistency in historical observations and has generated firewall blocking recommendations. SOC teams should consider blocking or rate-limiting traffic from this address pending additional correlation with threat intelligence feeds.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
RegionGrand Est
CityLauterbourg
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

๐Ÿข Ownership & Registration

OrganizationJohannes Selg
ASNAS51167
Network NameCONTABO
CIDR Block62.171.160.0/19
RIRRIPE
CountryDE
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRvmi3043351.contaboserver.net
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesvmi3043351.contaboserver.net

๐Ÿ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSVerified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierTier 3 โ€” Basic operator with some routing infrastructure
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
Closed Ports22, 25, 3389, 8080, 8443 (2 open / 7 scanned)
ServerCaddy
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
35%
22
routing
25%
11
services
25%
11
ownership
0%
00
reputation
25%
11
geolocation
25%
11
Overall22%66
Coverage: 5/6 dimensions ยท Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-08-12 06:13:02 UTC
Last Seen2026-08-28 02:53:32 UTC
Profile Built2026-08-29 03:18:33 UTC
Data FreshnessLive
Signal Types21
Total Observations24
๐Ÿ” 21 signal types ยท 24 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.