IPDebrief

37.27.196.159

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP Intelligence Briefing: 37.27.196.159

Date: 2026-06-13

---

**1. IP Profile**

---

**2. Observation History**

- DNSBL listings (2/8 total) detected in DNS records.

- Consistent DNS resolution for `static.159.196.27.37.clients.your-server.de`.

- No spikes in threat signals or network anomalies.

---

**3. Relationships**

- Linked to Hetzner's network (`DE-HETZNER-20111228`).

- DNS association with `your-server.de` (SPF/DMARC configured).

---

**4. Neighborhood Analysis**

---

**5. Recommendations**

Conclusion: This IP appears to be a legitimate Hetzner-hosted server with no active threats. However, the DNSBL listings warrant further investigation to rule out historical abuse or misconfigurations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ซ๐Ÿ‡ฎ Finland
Region23
CityTehran
TimezoneEurope/Helsinki
Latitudeโ€”
Longitudeโ€”

๐Ÿข Ownership & Registration

OrganizationHetzner Online GmbH - Contact Role
ASNAS24940
Network NameDE-HETZNER-20111228
CIDR Block37.27.0.0/16
RIRRIPE
CountryFI
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRstatic.159.196.27.37.clients.your-server.de
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesstatic.159.196.27.37.clients.your-server.de

๐Ÿ” DNS Hygiene

Hygiene Score100% (Excellent)
SPFPresent
DMARCPresent
FCrDNSVerified
DNSSECValid
CAAPresent

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierTier 3 โ€” Basic operator with some routing infrastructure
Hosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Servernginx/1.30.2
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.15

๐Ÿ” TLS Certificate

A self-signed certificate was detected. This is common for development servers, internal services, or IoT devices.
โš ๏ธ
CN=parking, OU="", O=FASTPANEL, L="", S="", C=""
Issued by CN=parking, OU="", O=FASTPANEL, L="", S="", C=""
Self-signed: Yes
SANsNone
Valid From2025-11-12T05:49:18+00:00
Valid Until2026-11-12T05:49:18+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period365 days
Serial Number01
ThumbprintB5FDA3D18EBC4EA3AF1E9FEAFFEBDA250548E07A

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
33%
24
routing
27%
23
services
30%
23
ownership
32%
34
reputation
28%
13
geolocation
13%
11
Overall27%1118
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceMixed Signals (68%) โ€” 2 contradiction(s)
AttributionModerate (55%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
โš  Geo sources disagree on country: "", FI
โš  TLS certificate claims "" but primary geo says FI

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-06-07 07:50:21 UTC
Last Seen2026-06-21 13:45:36 UTC
Profile Built2026-06-21 13:50:20 UTC
Data FreshnessLive
Signal Types28
Total Observations29
๐Ÿ” 28 signal types ยท 29 observations collected
This report is generated from 28+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.