164.68.112.63📋 Copy

IP Intelligence Briefing: 164.68.112.63

Date: 2026-06-08

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Registered to Johannes Selg (AS: 51167, ARIN).
• Geolocation: Nuremberg, Germany (51.17°N, 10.45°E).
• Network Role: Cloud compute instance hosted by Contabo (Hosting Provider).
• Threat Indicators: No malicious activity detected (no blacklists, campaigns, or DNS-based threats).

---

**2. Network Behavior**

• Subnet: 164.68.112.63/24
• Abuse Density: 1 (low risk subnet).
• Neighboring IPs:

- 164.68.112.203 (Risk Score: 0, Authority Score: 50).

• Subnet Classification: "Mostly Clean" with 1 threat sibling (low priority).

---

**3. Technical Observations**

• DNS:

- PTR hostname: vmi3156244.contaboserver.net.

- No email authentication (SPF/DKIM/DMArC absent).

• Services: No open ports or TLS certificates detected.
• BGP: Prefix 164.68.112.0/23, routed via Contabo.
• Geo Validation: Plausible (RTT: 117–137ms, ~400km accuracy).

---

**4. Temporal Trends**

• Observation History:

- 19 records over 30 days, showing consistent low-risk behavior.

- No persistent malicious activity or ownership changes.

• Threat Persistence: No repeated malicious signals.

---

**5. Relationships**

• DNS Associations: Linked to vmi3156244.contaboserver.net (multiple entries).
• Network Relationships: Same subnet as "CONTABO" (likely hosting provider).

---

**6. Recommendations**

• Monitor: Subnet 164.68.112.0/23 for unusual activity, particularly 164.68.112.203.
• Verify: Ensure no unintended exposure of cloud instances (e.g., misconfigured firewalls).
• No Action Required: Current risk profile is low, and no threats are detected.

---

Source: IPDebrief Threat Intelligence Platform.

Note: This IP is associated with a hosting provider and appears to be a legitimate cloud compute instance. No immediate mitigation is required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.