asn.dev

Autonomous system

AS51167 CONTABO

Hosting RIPE Content

IPv4 addresses 543K 250 prefixes
IPv6 prefixes 2 counted as prefixes, not addresses
Countries 1 mostly DE
Exchanges 0 recorded by PCH
Upstreams 4 1 downstream
Flagged prefixes 0 none

Summary

Contabo

Germany · AI-generated

hosting vps dedicated

An Autonomous System operated by Contabo, a German provider known for very low-cost VPS and dedicated servers with generous resource allocations. CONTABO

What it's used for

  • Budget VPS, dedicated servers, and storage/VDS hosting for a large global customer base.

Notable

  • An IP here identifies Contabo as the host, not the operator of what runs on it — the low price point means a wide mix of legitimate and abusive tenants.
  • Contabo has expanded from a single German footprint to data centers in the US, Asia, and elsewhere.

Interesting

  • Contabo built its reputation on aggressively cheap VPS plans, which made it a common choice for hobbyists and, consequently, a frequent entry in abuse datasets.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Interconnection

Peering at a glance

Full topology · Graph

Internet exchanges

No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.

Transit providers

4 upstream, 1 downstream and 9 adjacent networks observed; most-used upstreams first.

ASNetworkPaths seen
AS3356Level 3 Parent, LLC16,843
AS1299Arelion Sweden AB15,804
AS13768Aptum Technologies542
AS174Cogent Communications, LLC538

Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.

Address space

Summary

Shape and geography

IPv4 250 prefixes · 543K addresses IPv6 2 prefixes

CountryNamePrefixes
DEGermany252

Registry

Allocation record

RIPE · via Atlas (registry + RDAP)
Registry
RIPE
Handle
AS51167
Registry name
CONTABO
Registrant
MNT-CONTABO
Abuse contact
abuse@contabo.de
Registered
2010-06-11
Last changed
2024-09-03
Allocation
allocated

Declared

PeeringDB profile

self-reported
Name
Contabo
Network type
Content
Scope
Global
Traffic ratio
Balanced
Peering policy
Selective
IRR as-set
RIPE::AS51167:AS-ALL
Facilities
2 facilities
Website
https://www.contabo.com

PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.

Routing security

RPKI and IRR

Full detail
RPKI
97% valid · 558 valid, 15 with no ROA
ROAs
588 authorising AS51167
ASPA
no ASPA record
IRR
100% registered · 573 of 573 announcements
Route objects
809 naming AS51167

Reputation

Classification and threat

Hosting Datacenter or cloud provider. Addresses are servers, not people.

Spamhaus DROP

Not on ASN-DROP The network as a whole is not listed.

No DROP prefixes None of its announced space is on the DROP prefix list.

Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.

FBI IC3

12 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
185.194.216.13China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
185.2.103.236China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
193.200.241.157China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
193.34.144.131China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
213.136.66.213China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
79.143.186.63China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
80.241.213.68China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
80.241.213.90China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
80.241.213.93China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26
91.194.90.213China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems2026-08-26

Showing the first 10 of 12.

IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check