91.107.131.27📋 Copy

# IP Intelligence Briefing: 91.107.131.27/32

Classification: Moderate Risk

Date: Current Analysis

Target: 91.107.131.27

---

## Executive Summary

IP 91.107.131.27 is registered to Hetzner Online GmbH (ASN 24940) within the German CLOUD-FSN1 infrastructure block (91.107.128.0/20). The IP is classified as a cloud compute resource located in Falkenstein, Saxony, DE. Risk assessment yields a moderate risk score of 40, with no active threat indicators detected. The IP is currently hosted within Hetzner's datacenter infrastructure and has no open ports or active services detected.

---

## Network Intelligence

---

## Threat Assessment

• Risk Score: 40 (Moderate Risk)
• Abuse Confidence: Not specified
• Blacklist Status: 0 blacklist entries
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

The IP lacks active threat indicators and shows no evidence of malicious activity. However, the moderate risk score warrants monitoring given its cloud hosting environment.

---

## Historical Signals

Fourteen observation signals recorded. Recent telemetry confirms:

• Persistent Hetzner provider attribution
• Consistent German geolocation (Falkenstein, Saxony)
• No emergence of new threat indicators
• Stable infrastructure classification

No temporal escalation in risk posture observed.

---

## Relationships & DNS

DNS records forward to your-server.de domain with valid SPF and DMARC authentication. No email reputation scoring available.

---

## Neighborhood Analysis

/24 subnet (91.107.131.0/24) shows:

• Neighbor Count: 0
• Abuse Density: 0
• High-Risk Siblings: 0

No adjacent IPs flagged as suspicious.

---

## Recommended Actions

Firewall and WAF rules available for blocking. Due to moderate risk score and lack of open services, the IP may represent a false positive or be used for scanning activities.

Suggested Rules:

• iptables: `iptables -A INPUT -s 91.107.131.27 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 91.107.131.27 drop`
• NGINX: `deny 91.107.131.27;`
• Cloudflare WAF: Block IP 91.107.131.27/32

---

## Intelligence Narrative

IP 91.107.131.27 operates within Hetzner's enterprise cloud infrastructure in Germany. The moderate risk classification reflects its hosting environment rather than confirmed malicious activity. No open services or ports detected, suggesting the IP is either idle, behind a firewall, or used for network scanning purposes. The lack of blacklist entries and historical threat indicators supports benign infrastructure classification. However, the IP's association with your-server.de domain warrants monitoring for potential abuse of the hosting infrastructure.

Recommendation: Monitor for increased activity patterns. Apply firewall blocking if the IP generates suspicious connection attempts.

---

*Analysis based on IPDebrief intelligence platform data. Recommendations should be validated against organizational security policies before deployment.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.