37.27.119.108📋 Copy

# IP INTELLIGENCE BRIEFING: 37.27.119.108/32

Classification: Moderate Risk | Risk Score: 50/100 | Date: 2026-07-23

---

## Executive Summary

IP 37.27.119.108 is a cloud-hosted server operated by Hetzner Online GmbH (ASN 24940), registered under network DE-HETZNER-20111228 (37.27.0.0/16). The address is classified as a web server in cloud infrastructure with moderate risk indicators. The IP shows minimal threat activity but has DNSBL listings and requires monitoring.

---

## Ownership and Geolocation

• Organization: Hetzner Online GmbH
• ASN: 24940
• Network Block: 37.27.0.0/16
• Registered Country: Finland (FI)
• IPR: RIPE NCC
• Registration Date: 2011-12-28

---

## Network Profile

• Infrastructure Type: Cloud Compute / Hosting
• Connection Type: Web Server
• Open Ports: 80/tcp (HTTP), 443/tcp (HTTPS), 22/tcp (SSH)
• Server Fingerprint: nginx/1.28.0
• TLS Certificate: CN=fasih.org, Issuer: Let's Encrypt (R13)
• Forward Resolution: static.108.119.27.37.clients.your-server.de (your-server.de)

---

## Threat Indicators

• Risk Score: 50 (Moderate)
• DNSBL Listings: 2 of 8 total lists
• Abuse Confidence Score: Not available
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Campaign Activity: None detected
• Threat Persistence: 0 days
• Stability Score: 0 (insufficient data)

---

## Temporal Analysis

• Total Observations: 26 signals
• Observation Period: 2026-07-06 to 2026-07-23
• Ownership Changes: 0
• Threat Observation Count: 0
• Persistence Status: Not persistently malicious

Recent HTTP fingerprinting (2026-07-06) shows:

• HTTP/1.1, response time 891ms
• Security headers: No CSP, No HSTS, No referrer policy
• robots.txt configured with disallow all
• SPF/DMARC status variable across observations

---

## Relationship Mapping

• DNS Associations: static.108.119.27.37.clients.your-server.de (12 records)
• Network Associations: DE-HETZNER-20111228 (6 records)
• Related Hostnames: your-server.de domain family

---

## Neighborhood Analysis (37.27.119.0/24)

• Total Siblings: 1
• Active Siblings: 0
• Abuse Density: 0
• Classification: Clean
• Threat Siblings: 0
• Inherited Risk: 0

No adjacent addresses in the /24 subnet show malicious activity.

---

## Control Plane Data

• Origin ASN: 24940
• BGP Prefix: 37.27.0.0/16
• Route Stability: Stable
• RPKI State: Not validated
• IRR Consistency: Not checked
• DNSSEC Valid: Yes
• CAA Records: Present

---

## Recommended Actions

Status: No specific action required per automated recommendations (risk score 50 threshold not met). However, the following firewall rules may be applied based on risk profile:

```bash

# iptables

iptables -A INPUT -s 37.27.119.108 -j DROP

# nftables

nft add rule inet filter input ip saddr 37.27.119.108 drop

# nginx

deny 37.27.119.108;

# Cloudflare WAF

ip.src eq 37.27.119.108 → BLOCK

# AWS WAF

Addresses: 37.27.119.108/32 → Block rule

```

---

## Intelligence Assessment

The IP address 37.27.119.108 presents moderate risk primarily due to DNSBL listings and hosting infrastructure characteristics. The TLS certificate points to fasih.org, which warrants domain-level correlation. No active malicious campaigns or peer threats detected in the neighborhood.

Monitoring Recommendation: Maintain passive monitoring. Investigate fasih.org domain for potential associations if observed in threat context. No immediate blocking required absent additional threat indicators.

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.