204.168.207.227
INTELLIGENCE BRIEFING: 204.168.207.227/32
---
EXECUTIVE SUMMARY
IP 204.168.207.227 is a cloud compute endpoint hosted by Hetzner Online GmbH (AS24940) in Finland. Risk assessment indicates low-threat status with a risk score of 25. No active malicious indicators, campaigns, or attack patterns detected.
INFRASTRUCTURE PROFILE
- Organization: Hetzner Online GmbH - Contact Role
- Network: CLOUD-HEL1 (204.168.192.0/20)
- Location: Finland (FI)
- Infrastructure Type: Cloud Compute / Hosting
- DNS Resolves: static.227.207.168.204.clients.your-server.de
- Registrar: your-server.de
- Registration: Cloud infrastructure with stable ownership
THREAT ASSESSMENT
- Risk Score: 25 (Low Risk)
- Abuse Confidence: No active threat indicators
- Blacklist Status: Listed on 1 of 8 DNSBLs
- Campaign Activity: None detected
- Known Attacker: False
- Tor/Proxy: Not a Tor exit node, not proxy infrastructure
NETWORK BEHAVIOR
- Open Ports: None detected
- Active Services: Firewalled / No services exposed
- BGP Prefix: 204.168.128.0/17
- Routing Stability: Route changes detected in last 30 days
- Operator Classification: Basic (Score: 0.3478)
NEIGHBORHOOD CONTEXT
- Subnet: 204.168.207.227/24
- Abuse Density: 0% (mostly_clean classification)
- Total Siblings: 2 active
- Neighbor Risk Profile:
- 204.168.207.161: Risk Score 0 (clean)
- 204.168.207.210: Risk Score 25 (low risk, same IP)
- Threat Siblings: 1 identified in subnet
TEMPORAL ANALYSIS
- Observations: 20 data points collected
- Threat Persistence: 0 days (no persistent malicious behavior)
- Recent Activity: Signals observed as recently as 2026-08-13
- Ownership Stability: Stable (0 ownership changes)
RECOMMENDATIONS
No immediate blocking actions recommended. This IP exhibits characteristics of legitimate cloud infrastructure. Monitor for:
- Emergence of open services
- DNSBL listing changes
- Neighborhood risk escalation
- Unusual traffic patterns from this endpoint
CLASSIFICATION: LOW RISK — Cloud hosting infrastructure with minimal threat indicators. No immediate action required for defensive operations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-HEL1 |
| CIDR Block | 204.168.192.0/20 |
| RIR | ARIN |
| Country | FI |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | static.227.207.168.204.clients.your-server.de |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | static.227.207.168.204.clients.your-server.de |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-02 04:45:32 UTC |
| Last Seen | 2026-08-13 03:27:32 UTC |
| Profile Built | 2026-08-13 03:40:39 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 23 |
Full dossier details are available via our API.