# IP Intelligence Briefing: 167.233.134.199/32
Classification: Low Risk
Date: 2026-08-06
Analyst: IPDebrief Intelligence Team
---
## Executive Summary
IP address 167.233.134.199 is a German-hosted infrastructure endpoint operated by Hetzner Online GmbH. The IP demonstrates low-risk characteristics with no active threat indicators, no open services, and no known malicious associations. However, limited intelligence coverage and sparse historical signals warrant continued monitoring.
---
## Network Profile
| Attribute | Value |
|---|---|
| **IP Address** | 167.233.134.199/32 |
| **ASN** | 24940 (HETZNER-AS) |
| **Organization** | Hetzner Online GmbH, DE |
| **Country** | Germany (DE) |
| **Region/City** | Coordinates: 51.3°N, 9.49°E |
| **Classification** | Hosting Infrastructure |
| **Risk Score** | 0 (Low Risk) |
---
## Network Role Analysis
- Infrastructure Type: Hosting
- Connection Type: Firewalled / No Services
- Service Purpose: No active services detected
- Open Ports: None
- DNS Resolution: Forward resolution not confirmed
- PTR Records: None
The endpoint presents as a firewalled hosting resource with no publicly exposed services or TLS certificates. This suggests the IP may be part of a backend infrastructure, reserved address, or deliberately shielded service.
---
## Threat Intelligence Indicators
| Indicator Type | Status |
|---|---|
| **Known Attacker** | False |
| **Tor Exit Node** | False |
| **Spam Source** | False |
| **Blacklist Count** | 0 |
| **Pulsedive Risk** | N/A |
| **Known Campaigns** | None |
| **Threat Feeds** | None |
| **Abuse Confidence** | N/A |
No active threat indicators detected across monitored threat intelligence feeds.
---
## Historical Observations
Total signals observed: 12
Recent Activity (2026-08-06):
- DNS Listings: 8 total listings with 1 high-severity listing detected
- DNSSEC: Valid RRSIG records confirmed
- Email Authentication: SPF and DMARC records present for "your-server.de"
- SPF: `v=spf1 mx -all`
- DMARC: `v=DMARC1;p=none;sp=none;adkim=r;aspf=r`
- CAA Records: 2 issuers configured
- ASN Resolution: Confirmed as HETZNER-AS (167.233.0.0/16)
The historical data indicates this IP has been associated with domain "your-server.de" with email authentication records. The presence of strict SPF policy (`-all`) suggests the domain maintains email reputation controls.
---
## Relationship Analysis
- Related Entities: None detected
- Associated Hostnames: None
- Certificates: None
- Related Organizations: None
No relationship graph connections established for this IP address.
---
## Neighborhood Analysis
Subnet: 167.233.134.199/24
- Abuse Density: 0
- Total Siblings: 0
- Active Siblings: 0
- Threat Siblings: 0
- High Risk Neighbors: 0
The /24 subnet shows no abuse density and no associated threat activity. This indicates the IP operates in isolation without neighboring infrastructure abuse patterns.
---
## Recommended Actions
| Priority | Action |
|---|---|
| **LOW** | Monitor for service exposure |
| **LOW** | Track DNS listing changes |
| **NONE** | No immediate blocking required |
Rationale: The IP demonstrates low-risk characteristics with no active threat indicators. However, limited intelligence coverage (sparse historical data, no relationships detected) suggests the endpoint may be underreported or recently deployed. Continue passive monitoring.
---
## Intelligence Confidence
- Data Sufficiency: Limited
- Coverage: Sparse historical signals
- Coverage Confidence: Low
- Overall Confidence: 0/100
The intelligence picture is incomplete due to minimal observable activity. The absence of relationships, neighborhood data, and threat indicators may indicate the IP is either newly provisioned, heavily restricted, or underreported in threat feeds.
---
Status: Monitor
Next Review: 2026-08-13
*Generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-FSN1 |
| CIDR Block | 167.233.128.0/20 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.199.134.233.167.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.199.134.233.167.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | openresty |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 29% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-03 11:22:00 UTC |
| Last Seen | 2026-08-13 04:52:58 UTC |
| Profile Built | 2026-08-13 05:20:37 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
Full dossier details are available via our API.