37.60.230.103📋 Copy

IP Intelligence Briefing: 37.60.230.103

*Generated via IPDebrief Threat Intelligence Platform*

---

**1. Core Profile**

• Risk Score: 0 (Low Risk)
• Provider: Contabo (Cloud Compute Hosting)
• Ownership: Johannes Selg (AS51167, RIPE)
• Geolocation: Germany (DE), Lauterbourg, 51.17°N 10.45°E
• Network Role: CloudCompute (firewalled, no public services)
• Threat Indicators: No active threats, no blacklist entries, not a Tor exit node

---

**2. Observation History**

• Recent Activity:

- Observed in Chicago, IL (US) with threat indicators (pulse_count=3, unknown pulse names).

- Mixed geolocation signals: 11 observations over 5 months (last updated 2026-06-11).

- Stability: Route instability detected (BGP route changes, low operator score).

• Consistency: 21 total observations; 16% of signals flagged as "high" risk.

---

**3. Relationships & Context**

• DNS Associations:

- Resolves to `vmi3222272.contaboserver.net` (Contabo VM).

- No email auth (SPF/DKIM) detected.

• Network Links:

- Subnet: `37.60.230.103/24` (abuse density: 1/100).

- No malicious neighbors detected.

• Provider: Contabo (cloud hosting) with no recent abuse reports.

---

**4. Behavioral Flags**

• Geolocation Discrepancy: IP registered in Germany but observed in the U.S. with threat signals.
• Route Stability: Unstable BGP routes (route changes in last 30 days).
• Ownership: Static ASN (AS51167) with no ownership changes.

---

**5. Recommendations**

• Monitor: Track geolocation anomalies and BGP route stability.
• Verify: Cross-check DNS resolution (`vmi3222272.contaboserver.net`) with internal hostnames.
• Block: Consider blocking if threat signals persist or if the IP is used for lateral movement.
• Context: Low-risk profile may mask dynamic cloud environments; validate against internal threat feeds.

---

*End of Briefing*

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.