Critical Alert
Security alert: 5.189.173.63 rated 10/10 based on 146 verified incidents.
Threat profile indicates sustained malicious activity with 0% confidence rating.
More threatening than 93% of monitored IPs
IP Address
5.189.173.63
IPv4
Public
FR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
FR
Location
Contabo GmbH
ASN 51167
146
Reports
Honeypot
Data Source
Threat Categories
Web App Attack
30
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Reputable Network
This IP is hosted on a network (ASN 51167) with generally good reputation. The ISP Contabo GmbH maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
0%
Unverified
Confidence History
21. Oct 2025
0%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 5.189.173.63
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
FR
- ASN
- AS51167
- ISP
- Contabo GmbH
DNS Information
- Reverse DNS
- vmd210978.contaboserver.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 146
- First Reported
- 20 Oct 2025
- Last Reported
- 21 Oct 2025, 06:11
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS51167
Contabo GmbH
FR
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
778
Total IPs Monitored
28,942
Total Reports
37.2
Reports per IP
Network Context
This IP address belongs to Contabo GmbH (AS51167), which manages 778 IP addresses in our monitoring system. Out of these, 28,942 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,328,234 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
146
avg: 7
++
Network Comparison
Compared against 2,814 IPs in ASN 51167
Threat Level
10/10
network avg: 7.4
+
Total Reports
146
network avg: 19
++
Network Contabo GmbH has overall threat level 2/10
Geographic Comparison
Compared against 18,497 IPs in FR
Threat Level
10/10
country avg: 6.5
++
Total Reports
146
country avg: 18
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
95 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
146
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 39 reports
Weekly Activity
Geographic Threat Distribution
1,210,744 threat incidents tracked globally • Last 24h: 32,720 Logs
FEED
Top Threat Sources
-
01
Brazil261,155 21.6% -
02
United States207,412 17.1% -
03
India103,518 8.5% -
04
China50,996 4.2% -
05
Argentina42,423 3.5% -
06
SC29,448 2.4% -
07
Mexico27,930 2.3% -
08
Russia26,998 2.2% -
09
Germany24,428 2% -
10
Colombia24,273 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.9/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
161.97.134.31
8/10
Confidence
96%
Reports
50
Location
FR
FR
62.169.28.123
10/10
Confidence
94%
Reports
544
Location
FR
FR
207.180.253.181
10/10
Confidence
94%
Reports
526
Location
FR
FR
62.169.22.41
10/10
Confidence
94%
Reports
470
Location
FR
FR
173.249.54.93
10/10
Confidence
94%
Reports
469
Location
FR
FR
185.250.37.110
10/10
Confidence
94%
Reports
448
Location
FR
FR
167.86.102.132
10/10
Confidence
94%
Reports
432
Location
FR
FR
84.46.248.188
10/10
Confidence
94%
Reports
425
Location
FR
FR
62.171.151.68
10/10
Confidence
94%
Reports
421
Location
DE
DE
213.199.59.115
10/10
Confidence
94%
Reports
421
Location
FR
FR
84.46.250.47
10/10
Confidence
94%
Reports
418
Location
FR
FR
167.86.103.228
10/10
Confidence
94%
Reports
418
Location
FR
FR
164.68.102.175
10/10
Confidence
94%
Reports
417
Location
FR
FR
84.46.252.220
10/10
Confidence
94%
Reports
416
Location
FR
FR
84.46.248.77
10/10
Confidence
94%
Reports
414
Location
FR
FR
62.169.23.62
10/10
Confidence
94%
Reports
413
Location
FR
FR
84.46.252.81
10/10
Confidence
94%
Reports
409
Location
FR
FR
207.180.239.185
10/10
Confidence
94%
Reports
93
Location
FR
FR
77.237.233.136
10/10
Confidence
94%
Reports
80
Location
FR
FR
37.60.253.219
10/10
Confidence
94%
Reports
80
Location
FR
FR
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
40%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.95.233.18
10/10
Confidence
100%
Reports
18
ISP
Global Connecti...
104.28.196.57
10/10
Confidence
100%
Reports
15
ISP
Cloudflare, Inc.
104.28.196.55
8/10
Confidence
100%
Reports
14
ISP
Cloudflare, Inc.
104.28.228.55
10/10
Confidence
100%
Reports
13
ISP
Cloudflare, Inc.
91.231.89.33
8/10
Confidence
97%
Reports
165
ISP
ONYPHE SAS
163.5.241.8
8/10
Confidence
97%
Reports
10
ISP
F.n.s. Holdings...
161.97.134.31
8/10
Confidence
96%
Reports
50
ISP
Contabo GmbH
45.80.27.169
10/10
Confidence
96%
Reports
33
ISP
Free Pro SAS
163.172.66.206
10/10
Confidence
96%
Reports
28
ISP
Scaleway SAS
163.5.241.11
8/10
Confidence
96%
Reports
10
ISP
F.n.s. Holdings...
51.195.149.120
10/10
Confidence
95%
Reports
34
ISP
OVH SAS
51.68.151.167
10/10
Confidence
95%
Reports
25
ISP
OVH SAS
104.28.228.57
10/10
Confidence
95%
Reports
11
ISP
Cloudflare, Inc.
163.5.241.2
8/10
Confidence
95%
Reports
9
ISP
F.n.s. Holdings...
194.5.53.175
8/10
Confidence
95%
Reports
9
ISP
F.n.s. Holdings...