89.116.25.45📋 Copy

# IP Intelligence Briefing: 89.116.25.45/32

## Executive Summary

IP address 89.116.25.45 presents as a low-risk cloud infrastructure endpoint operated by Contabo, a European cloud hosting provider. The system registered a risk score of 25 and demonstrated no active threat indicators during the observation period. The IP resolved to a Contabo virtual machine hostname and maintained standard web server services without evidence of malicious activity.

## Technical Profile

The IP address 89.116.25.45 operated within ASN 51167 (LRTC-MNT) under RIR RIPE. Geolocation data placed the endpoint in Lauterbourg, Grand Est, France, with coordinates 48.97°N, 8.19°E. The infrastructure functioned as a CloudCompute instance with Web Server designation, confirmed through open ports 80 (HTTP), 443 (HTTPS), and 22 (SSH). The server banner identified Caddy as the web server software. DNS resolution returned the hostname vmi3305036.contaboserver.net with forward confirmation enabled. Email authentication was not configured, with no SPF or DMARC records detected for the associated domain.

## Threat Assessment

Threat analysis yielded no malicious indicators. The IP maintained a low-risk reputation classification with an abuse confidence score of null. No known attacker signatures, spam source indicators, or Tor exit node characteristics were detected. Blacklist analysis returned zero entries across monitored sources. The IP did not participate in any known campaigns or show certificate-based threat associations. Control plane analysis indicated one DNSBL listing among eight total lists tested, with an operator score of 0.2609 classified as Basic.

## Historical Analysis

Signal observation history captured 24 data points across the observation window. Recent observations from June 2026 recorded connection failures on HTTPS endpoints with confidence scores between 0.24 and 0.60. Routing signals maintained a consistent operator score of 0.2609 with Basic classification. No persistent malicious behavior emerged, and threat observation count remained at one. The system showed no stability changes or ownership modifications during the monitoring period.

## Network Context

Subnet analysis for 89.116.25.0/24 returned an abuse density classification of mostly_clean. The neighborhood contained 24 sibling IPs with zero high-risk, zero medium-risk, and zero low-risk classifications. Abuse density measured at 0, indicating minimal subnet-wide abuse activity. The IP demonstrated inherited risk of 2 and no active threat siblings within the subnet.

## Related Entities

Relationship mapping identified 39 associations including DNS associations to vmi3305036.contaboserver.net and network associations to LRTC_INETNUM_RENT. No anomalous relationships or unusual entity connections emerged from the relationship graph analysis.

## Recommendations

Based on the low-risk profile and absence of threat indicators, standard network security policies apply. The IP address requires no special handling beyond routine monitoring. SOC analysts may classify this endpoint as legitimate cloud infrastructure for Contabo hosting services. No blocking or alerting actions warranted at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.