# Intelligence Briefing: 37.60.239.199/32
## Executive Summary
IP address 37.60.239.199 presents a low-risk profile with a risk score of 25. The IP is associated with a VPS instance on the Contabo server network and currently operates without open services. While the IP maintains a low risk classification, it does appear on one DNSBL with high severity rating.
## Network Classification
- Risk Score: 25 (Low Risk)
- ASN: 51167
- BGP Prefix: 37.60.224.0/20
- Subnet: 37.60.239.0/24
- Subnet Abuse Density: 0 (all neighbors classified as low risk)
## DNS & Hostname Intelligence
- PTR Hostname: vmi2890204.contaboserver.net
- Forward Resolution: Confirmed (1 host)
- DNSBL Status: Listed on 1 of 8 threat feeds
- DNSSEC: Valid
## Service & Port Status
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- TLS Certificates: None
- HTTP Banner: None
## Ownership & Registration
- Organization: Not resolved
- Netname: Not resolved
- Registration Date: Not available
- Abuse Contact: Not available
## Historical Signal Analysis
The IP has generated 11 observations, with the most recent activity recorded on 2026-08-13. Signal confidence ranged from 0.12 to 0.85 across observations. Key historical indicators include:
- Multiple port scan events detected
- DNSBL listing with high severity observed
- Basic operator score assessment completed
## Neighborhood Analysis
Two neighboring IPs identified within the /24 subnet:
- 37.60.239.163: Risk Score 25 (Low Risk)
- 37.60.239.218: Risk Score 30 (Low Risk)
All neighbors maintain low-risk classifications with no abuse density signals.
## Recommended Actions
No specific blocking actions currently recommended. The IP maintains a low-risk profile with no active threat campaigns, known attacker indicators, or spam source classifications. Routine monitoring advised.
---
*Intel generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | TT-20240125 |
| CIDR Block | 37.60.224.0/20 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vmi2890204.contaboserver.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vmi2890204.contaboserver.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | Apache/2.4.58 |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-07 07:32:58 UTC |
| Last Seen | 2026-08-31 19:56:16 UTC |
| Profile Built | 2026-08-31 19:58:43 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 23 |
Full dossier details are available via our API.