2.27.63.137📋 Copy

IP Intelligence Briefing: 2.27.63.137

Date: 2026-06-13

---

**1. Risk Profile**

• Overall Risk Score: 25 (Low Risk)
• Provider/Authority Scores: 0/0
• Network Stability: Unstable (route instability detected)
• Threat Indicators: No malicious activity, no blacklisted domains, no known attacker associations.

---

**2. Ownership & Geolocation**

• Registrar: Kyonix Administrative Department (AS210457)
• Country: Germany (DE)
• Region: ENG (UK) | City: Ilford (conflicting geolocation data)
• Coordinates: Latitude 51.17, Longitude 10.45 (inferred via multi-signal inference).

---

**3. Network & Subnet Context**

• Subnet: 2.27.63.0/24
• Subnet Abuse Density: 0.2 (mostly clean)
• Neighbor IPs (high-risk):

- 2.27.63.106 (riskScore: 25)

- 2.27.63.100 (riskScore: 30)

- 2.27.63.64 (riskScore: 25)

- 2.27.63.0 (riskScore: 25)

---

**4. Threat & Behavior**

• No Active Services: No open ports, TLS certs, or HTTP banners detected.
• DNS: No PTR records, SPF/DKIM records, or domain associations.
• Tor Association: Listed as a Tor exit node (unconfirmed).
• Historical Observations:

- 16 total observations (2026-06-13).

- Mixed confidence levels (0.28–0.90).

- No confirmed threats or persistent malicious activity.

---

**5. Recommendations**

• Monitor Subnet: Track 2.27.63.0/24 for unusual activity due to low abuse density but potential for future risks.
• Verify Geolocation: Investigate conflicting location data (Germany vs. UK) for accuracy.
• Network Segmentation: Consider isolating this subnet if it hosts critical assets.
• Threat Feeds: Cross-reference with external feeds (e.g., AlienVault OTX) for missed indicators.

Conclusion: Benign IP with no immediate threats. However, its association with Tor exit nodes and geolocation inconsistencies warrant further investigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.