37.27.7.149
IP Intelligence Briefing: 37.27.7.149
Date: 2026-06-12
---
**1. Risk Profile**
- Risk Score: 40 (Moderate Risk)
- Provider: Hetzner Online GmbH (Cloud Compute)
- Geolocation: Helsinki, Finland (FI)
- Network Role: Cloud-hosted server (no residential/mobile traffic)
- Threat Indicators: No malicious activity detected (no known attackers, spam, or campaigns).
---
**2. Network & DNS Context**
- Ownership:
- ASN: 24940 (Hetzner Online GmbH)
- Subnet: 37.27.0.0/16 (CLOUD-HEL1)
- Hosting: Firewalled server (no open ports, no services detected).
- DNS:
- PTR hostname: `static.149.7.27.37.clients.your-server.de`
- Email security: SPF and DMARC records present.
- DNSSEC: Validated.
---
**3. Historical Observations**
- Recent Activity (30 days):
- No significant changes in risk or network behavior.
- DNSBL listings: 2 out of 8 lists (low severity, no high-risk categories).
- Stable BGP prefix (`37.27.0.0/16`) with Hetzner.
---
**4. Relationships & Subnet**
- Linked Entities:
- DNS hostname: `your-server.de` (CAA records present).
- Same network: `CLOUD-HEL1` (Hetzner).
- Subnet Analysis:
- 37.27.7.149/24: 1 sibling IP (`37.27.7.160`) with low risk (score: 30).
- Subnet abuse density: 0% (no malicious activity detected).
---
**5. Security Recommendations**
- Firewall Actions:
- Block: `iptables`, `nftables`, and WAF rules provided to restrict traffic.
- Monitoring: Track DNSBL listings and network behavior for anomalies.
- Next Steps:
- Confirm if the IP is required for legitimate operations.
- Monitor for unexpected service exposure or traffic patterns.
---
Conclusion:
The IP is a Hetzner cloud server with no active threats. While it has minimal DNSBL exposure, its moderate risk score and stable network context suggest it is likely benign. However, continued monitoring is advised to detect any emerging risks.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-HEL1 |
| CIDR Block | 37.27.0.0/20 |
| RIR | RIPE |
| Country | FI |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | static.149.7.27.37.clients.your-server.de |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | static.149.7.27.37.clients.your-server.de |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 24% | 9 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-02 18:13:25 UTC |
| Last Seen | 2026-06-21 09:10:05 UTC |
| Profile Built | 2026-06-21 09:16:12 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.