81.173.130.49📋 Copy

## IP Intelligence Briefing: 81.173.130.49/32

Classification: Low Risk / Clean

Risk Score: 25 / 100

Date: Current Assessment

---

**Ownership & Geolocation**

• ASN: 8422 (Administrator Contact NetCologne)
• Organization: NC-DIAL-IN-POOL
• Country: Germany (DE)
• City: Frankfurt/Cologne region (North Rhine-Westphalia)
• CIDR Block: 81.173.130.0/24
• Registration RIR: RIPE

The IP is allocated to NetCologne, a German telecommunications provider, within a dial-in pool network.

---

**Network Role & Services**

• Classification: Firewalled / No Services
• Open Ports: None detected
• Infrastructure Type: Not cloud, CDN, VPN, proxy, hosting, mobile, or residential
• Tor Exit Node: No
• DNSSEC Valid: Yes

No active services or listening ports were observed. The IP appears to be part of a residential cable/dial-in infrastructure.

---

**DNS Analysis**

• PTR Hostname: cable-81-173-130-49.nc.de
• Forward Resolution: Confirmed (cable-81-173-130-49.nc.de)
• Domain: nc.de
• Email Authentication: SPF: No | DMARC: No
• Forward Resolution Count: 1

DNS records confirm the IP is part of NetCologne's dial-in infrastructure.

---

**Threat Indicators**

• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists
• Abuse Confidence Score: Not available
• Known Campaigns: None
• Reputation Sources: None
• Threat Feeds: Empty

No active threat indicators detected. The IP is not flagged as a spam source, known attacker, or Tor exit node.

---

**Neighborhood Analysis (81.173.130.0/24)**

• Subnet Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor Risk Distribution: Low (1/2), Medium (0), High (0)
• Notable Neighbor: 81.173.130.82 (Risk: 0, Authority: 50)

The /24 subnet shows minimal abuse activity with both sibling IPs classified as clean.

---

**Relationship Graph**

The IP maintains consistent associations with:

• Network: NC-DIAL-IN-POOL (3 relationship entries)
• Hostname: cable-81-173-130-49.nc.de (3 relationship entries)

All relationships indicate stable network and DNS associations with the same organization.

---

**Observation History**

• Total Observations: 17
• Recent Activity: Multiple signals observed across geolocation, subnet classification, and operator scoring
• Threat Persistence: 0 days
• Ownership Changes: 0

Geolocation signals have shown varying locations (Frankfurt, Cologne) with moderate confidence levels, consistent with distributed dial-in infrastructure patterns.

---

**Control Plane Data**

• Origin ASN: 8422
• BGP Prefix: 81.173.128.0/17
• Route Changes (30d): 0
• Route Stability: False
• MOAS Status: No
• Operator Score: 0.2609 (Basic)
• Delegation Age: Not available

---

**Recommended Actions**

No specific firewall rules or security actions were generated. The IP presents a low risk profile consistent with residential telecommunications infrastructure.

---

**Summary Assessment**

IP 81.173.130.49 is a German telecommunications dial-in address with a low risk score of 25. No threat indicators, active services, or abuse patterns were detected. The IP belongs to NetCologne's NC-DIAL-IN-POOL network and shows clean neighborhood characteristics. No blocking or filtering is recommended at this time. SOC analysts may monitor but no immediate action is warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.