37.27.96.153📋 Copy

IP INTELLIGENCE BRIEFING: 37.27.96.153/32

Classification: LOW RISK

Report Date: Current

Risk Score: 0/100

---

EXECUTIVE SUMMARY

IP address 37.27.96.153 is associated with Hetzner Online GmbH (ASN 24940) infrastructure in Helsinki, Finland. The IP demonstrates a low-risk profile with no active threat indicators, blacklist listings, or persistent malicious activity observed. Network classification indicates the IP may be designated as a Tor Exit Node, though no operational evidence of Tor traffic was detected during analysis.

---

OWNERSHIP & GEOSPATIAL

---

THREAT INTELLIGENCE

• Abuse Confidence Score: Not assigned
• Blacklist Status: Listed on 8 DNSBL sources with 0 actual listings (false positives or expired entries)
• Threat Indicators: None detected
• Known Campaigns: None
• Tor Exit Node: Classified as potential Tor exit node, but no active Tor traffic observed
• ISP/Provider: Hetzner Online GmbH - European cloud/hosting provider

---

NETWORK INFRASTRUCTURE

• Open Ports: None detected
• HTTPS/TLS: No certificate data available
• HTTP Services: No active web services detected
• DNS Records: Forward resolution confirmed to your-server.de domain
• Email Authentication: SPF and DMARC records present
• Control Plane: DNSSEC valid, CAA records present, 8 DNSBL references (0 active listings)

---

HISTORICAL OBSERVATION (Last 16 Signals)

The IP has been observed with the following signal history:

• 2026-08-13 18:01: Ownership stability confirmed (0 changes, 0 threat observations)
• 2026-08-13 18:00: Subnet abuse density classified as "clean" (0/100)
• 2026-08-13 17:57: Geolocation inference to Finland with 28% confidence (750km accuracy radius)
• 2026-08-13 17:57: 8 DNSBL references observed with no active listings

No persistent malicious behavior detected. Threat observation count remains at zero.

---

NEIGHBORHOOD ANALYSIS (37.27.96.0/24)

The /24 subnet shows zero neighbor activity with no adjacent threat activity detected.

---

RELATIONSHIP GRAPH

• Network Association: DE-HETZNER-20111228 (Hetzner)
• DNS Association: static.153.96.27.37.clients.your-server.de
• No additional organizational or certificate relationships identified

---

RECOMMENDED ACTIONS

Current Risk Score: 0/100

• No immediate firewall rules recommended
• No blocking actions advised
• Monitor as passive traffic

The IP demonstrates benign characteristics consistent with normal hosting infrastructure. While classified as a potential Tor Exit Node, no operational Tor traffic was detected. The Hetzner network context suggests this is a standard customer-facing IP with no active abuse indicators.

---

BRIEFING NOTES FOR SOC ANALYSTS

1. IP belongs to major European hosting provider (Hetzner) with established reputation

2. No active threat indicators or blacklist listings present

3. Historical data shows stable ownership with no malicious activity patterns

4. Neighboring subnet demonstrates zero abuse density

5. Monitor for any changes in threat classification or blacklist status in future assessments

END REPORT

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.