94.72.126.37📋 Copy

IP Intelligence Briefing: 94.72.126.37

Date: 2026-06-16

---

**1. Risk Profile**

• Overall Risk: Moderate (Risk Score: 50)
• Threat Indicators: Listed in 8 threat feeds (high severity) on multiple dates (June 10–15, 2026).
• Network Classification: Hosted on Contabo cloud infrastructure (ASN: 40021).

---

**2. Geolocation & Ownership**

• Location: Registered to Germany (DE) but geolocated to Seattle, Washington (latitude: 51.17, longitude: 10.45).
• Owner: Johannes Selg (RIPE RIR, ASN 40021).
• Abuse Contact: Available via RDAP.

---

**3. Network Context**

• Subnet: 94.72.126.37/24 (abuse density: 1, classified as "mostly_clean").
• Hosting Role: CloudCompute instance (no residential/mobile traffic).
• DNS Associations: Linked to `vmi2783207.contaboserver.net` (multiple DNS records).

---

**4. Threat Observations**

• Recent Activity:

- Listed in 8 threat feeds (June 10–15, 2026) with high severity.

- No active neighbors in the /24 subnet (0 threat siblings).

• Behavioral Flags: No open ports, no TLS certs, no HTTP services detected.

---

**5. Recommendations**

• Monitor: Track listings in threat feeds (e.g., DNSBLs, IP reputation services).
• Investigate: Verify geolocation discrepancy (Germany vs. Seattle).
• Network Segmentation: Isolate cloud-hosted assets to limit lateral movement risks.
• DNS Analysis: Validate `vmi2783207.contaboserver.net` for potential C2 or command-and-control activity.

---

Source: IPDebrief Threat Intelligence Platform

Note: No immediate mitigation actions required, but ongoing monitoring is advised due to recent threat feed listings.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.