89.117.53.97📋 Copy

# IP Intelligence Briefing: 89.117.53.97/32

Classification: Low Risk | Risk Score: 25 | Generated: [Current Date]

## Executive Summary

IP address 89.117.53.97 is classified as low-risk with a score of 25. The IP is hosted on Contabo infrastructure (ASN 51167) in Lithuania and operates as a single-service host with SSH service accessible. No active threat indicators or malicious campaigns have been identified.

## Infrastructure Profile

Network Assignment:

• ASN: 51167 (LRTC-MNT)
• Organization: LRTC-MNT
• RIR: RIPE
• CIDR Block: 89.117.48.0/20
• Network Role: Single-Service Host (Cloud Compute)
• Provider: Contabo

Geolocation:

• Country: Lithuania (LT)
• Region: Grand Est
• City: Lauterbourg
• Timezone: Europe/Lithuania

DNS Resolution:

• PTR Record: vmi2901078.contaboserver.net
• Forward Resolution: vmi2901078.contaboserver.net (confirmed)
• Hosted Domain Count: 0

## Active Services

No TLS certificate, HTTP content, or web services detected.

## Threat Assessment

Current Risk Indicators:

• Abuse Confidence Score: Not applicable (no active threats)
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

DNSBL Status: Listed on 1 of 8 DNSBL lists

Risk Breakdown:

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Overall Classification: Low Risk

## Neighborhood Analysis

Subnet: 89.117.53.97/24

• Abuse Density: 0 (Clean)
• Inherited Risk: 0
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 0

No elevated risk observed within the immediate /24 subnet.

## Observation History

Total Observations: 21 signals

Recent Observations:

• 2026-06-28T01:36:44: Cloud compute infrastructure identified; provider confirmed as Contabo
• 2026-06-19T23:32:56: Provider confirmed as Contabo; network classification maintained
• 2026-06-19T23:30:51: Operator score 0.2609 (Basic); subnet classification clean

Temporal Indicators:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 1
• Persistently Malicious: No

## Relationship Graph

Total Relationships: 45

• Same Network Relationships: Multiple entries pointing to LRTC_INETNUM_RENT network identifiers
• External Hostnames/Organizations: None identified
• Certificates: None

## Recommended Actions

Risk-Based Recommendations:

• No immediate blocking or firewall rules recommended
• Standard monitoring practices apply
• Risk score of 25 indicates low threat level

Firewall Considerations:

• SSH port 22 is open; evaluate based on organizational policy
• No evidence of malicious activity requiring immediate remediation

Monitoring Priorities:

• Track for any changes in threat indicators
• Monitor for DNSBL additions
• Observe for changes in network classification

## Intelligence Assessment

The IP address 89.117.53.97 presents a low-risk profile consistent with legitimate Contabo hosting infrastructure. The clean subnet classification, absence of threat indicators, and stable ownership history suggest this is not a malicious actor IP. No immediate defensive action is required beyond standard operational monitoring.

Confidence Level: High

Data Freshness: Current (within last 7 days)

Threat Status: Active monitoring recommended but no immediate action required

---

*This briefing is based on IPDebrief intelligence data and should be correlated with additional threat intelligence sources before operational decisions.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.