# IP Intelligence Briefing: 77.42.7.80/32
Date: 2026-06-19
Analyst: IPDebrief Intelligence Unit
Classification: Standard Threat Intelligence
---
## Executive Summary
Target IP 77.42.7.80 presents as a Low Risk infrastructure endpoint (Risk Score: 25) operated by Hetzner Online GmbH. The address is classified as CloudCompute infrastructure with no active services. No malicious indicators or threat campaigns detected.
---
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **IP Address** | 77.42.7.80/32 |
| **Organization** | Hetzner Online GmbH - Contact Role |
| **ASN** | 24940 (ripencc) |
| **Country/Region** | Finland (FI), Uusimaa, Helsinki |
| **Infrastructure Type** | CloudCompute (Hosting) |
| **Risk Score** | 25/100 (Low Risk) |
| **Provider Score** | 0/100 |
| **Authority Score** | 0/100 |
---
## Network & Geolocation
- BGP Prefix: 77.42.0.0/17
- Route Stability: Stable (0 changes in 30 days)
- Geolocation Consensus: Validated across multiple sources
- Coordinate Accuracy: 750km radius (Helsinki, FI)
- ICMP Validation: Blocked (unable to validate via ICMP)
- Network Classification: Cloud hosting infrastructure, not bogon, not mobile
---
## Service & Port Analysis
- Open Ports: None detected (Firewalled / No Services)
- TLS Certificate: None
- HTTP Services: None
- Infrastructure Role: Firewall-backed cloud endpoint with no exposed services
---
## DNS Intelligence
- PTR Hostname: static.80.7.42.77.clients.your-server.de
- Forward Resolution: Confirmed
- Forward Hostnames: static.80.7.42.77.clients.your-server.de
- Domain: your-server.de
- Email Authentication: SPF and DMARC records present
- DNSBL Listings: 1 of 8 lists checked (minor listing)
---
## Threat Indicators
| Indicator | Status |
|---|---|
| Known Attacker | No |
| Tor Exit Node | No |
| Spam Source | No |
| Blacklist Count | 0 |
| Known Campaigns | None |
| Threat Feeds | None |
| Abuse Confidence Score | Not available |
---
## Relationship Graph
- Network Associations: DE-HETZNER-20061204 (Same Network)
- DNS Associations: static.80.7.42.77.clients.your-server.de
- Total Relationships: 30 entities
- Correlated IPs: None detected
---
## Neighborhood Analysis
| Metric | Value |
|---|---|
| **Subnet** | 77.42.7.80/24 |
| **Abuse Density** | 0 (Low) |
| **Total Siblings** | 1 |
| **Active Siblings** | 0 |
| **Threat Siblings** | 1 |
| **Classification** | Mostly Clean |
The immediate /24 neighborhood shows minimal activity with no active threat siblings.
---
## Temporal Observations
- Ownership Changes: 0
- Average Ownership Duration: N/A
- Threat Persistence Days: 0
- Threat Observation Count: 1
- Persistently Malicious: No
---
## Control Plane Data
| Metric | Value |
|---|---|
| **Origin ASN** | 24940 |
| **AS Path** | 34549 24940 24940 24940 24940 24940 24940 |
| **RPKI State** | Not evaluated |
| **IRR Consistency** | Not evaluated |
| **Route Changes (30d)** | 0 |
| **Route Stability** | Stable |
| **DNSSEC Valid** | Yes |
| **Has CAA** | Yes |
| **Delegation Age** | 8,777 days |
---
## Security Observations & History
25 historical observations captured through 2026-06-19:
- ASN Resolution: Consistent (24940, 8,777 days allocated)
- Geolocation: Stable Finland assignment across observations
- DNS Listings: Multiple blacklist checks with no confirmed malicious listings
- ICMP Validation: Consistently blocked (expected for cloud hosting)
---
## SOC Analyst Recommendations
Recommended Actions: None required at this time.
- Block Lists: No actionable block lists identified
- Firewall Rules: No specific rules recommended
- Monitoring: Standard baseline monitoring appropriate
Risk Assessment: This IP represents standard cloud hosting infrastructure from Hetzner with no malicious activity detected. The single DNSBL listing and one threat sibling in the /24 subnet warrant passive monitoring but do not indicate immediate threat.
---
End of Briefing
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | โ |
| CIDR Block | 77.42.0.0/17 |
| RIR | RIPE |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.80.7.42.77.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.80.7.42.77.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 4 |
| routing | 24% | 2 | 3 |
| services | 21% | 2 | 2 |
| ownership | 33% | 3 | 6 |
| reputation | 25% | 1 | 4 |
| geolocation | 33% | 2 | 3 |
| Overall | 27% | 12 | 22 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-13 00:04:53 UTC |
| Last Seen | 2026-06-27 22:23:16 UTC |
| Profile Built | 2026-06-28 16:28:08 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 31 |
Full dossier details are available via our API.