INTELLIGENCE BRIEFING: IP 46.224.164.125/32
Classification: LOW RISK โ Cloud Infrastructure Endpoint
Date: 2026-08-12
Analyst: IPDebrief Intelligence Team
---
EXECUTIVE SUMMARY
IP 46.224.164.125 is a low-risk cloud compute endpoint operated by Hetzner Online GmbH, located in Falkenstein, Saxony, Germany. The IP maintains a risk score of 15, exhibits no active threat indicators, and shows no evidence of malicious activity. The address is associated with Hetzner's CLOUD-FSN1 network infrastructure and is properly registered under RIPE NCC.
---
OWNERSHIP AND INFRASTRUCTURE
| Attribute | Value |
|---|---|
| **ASN** | 24940 (Hetzner Online GmbH) |
| **Organization** | Hetzner Online GmbH - Contact Role |
| **Network** | 46.224.160.0/20 (CLOUD-FSN1) |
| **RIR** | RIPE |
| **Infrastructure Type** | Cloud Compute |
| **Geolocation** | Falkenstein, Saxony, Germany (DE) |
The IP resolves to the hostname `static.125.164.224.46.clients.your-server.de` within Hetzner's static client DNS infrastructure.
---
THREAT ASSESSMENT
Current Risk Profile:
- Risk Score: 15 (Low)
- Abuse Confidence Score: N/A (No active indicators)
- Blacklist Count: 0
- Threat Indicators: None detected
Threat Classifications:
- โ Not a Tor exit node
- โ Not a known attacker
- โ Not a spam source
- โ No active threat feed matches
---
NETWORK BEHAVIOR AND SERVICES
Service Status: No services detected (Firewalled / No Services)
DNS Configuration:
- PTR Hostname: static.125.164.224.46.clients.your-server.de
- Forward Resolution: Confirmed (1 record)
- Domain: your-server.de
- Email Authentication: SPF record present
Control Plane Analysis:
- RPKI State: Valid
- IRR Consistency: Match
- Route Stability: 1 route change in 30 days
- BGP Origin: 46.224.0.0/15 (AS6939 โ AS24940)
---
TEMPORAL ANALYSIS
Observation History:
- Total Observations: 31 signals
- Threat Persistence Days: 0 (No persistent malicious activity)
- Ownership Changes: 0
- Threat Observation Count: 1 (non-malicious)
Recent observations from August 2026 indicate stable geolocation reporting (Germany) and consistent DNS resolution patterns. The operator score is rated as "Moderate" (0.6957) across routing and infrastructure signals.
---
NEIGHBORHOOD ANALYSIS
Subnet: 46.224.164.125/24
- Abuse Density: 1 (Low)
- Classification: Mostly Clean
- Active Siblings: 1
- Threat Siblings: 1
The /24 subnet shows minimal abuse activity, consistent with Hetzner's cloud infrastructure profile.
---
RELATED ENTITIES
The IP maintains relationships with:
- Network: CLOUD-FSN1 (46.224.160.0/20)
- Hostname: static.125.164.224.46.clients.your-server.de
---
RECOMMENDED ACTIONS
Monitoring Posture: Standard monitoring appropriate. No immediate blocking or alerting required.
Firewall Rules: No restrictive rules recommended. The IP exhibits legitimate cloud infrastructure behavior.
SOC Analyst Notes: This IP represents normal cloud compute traffic from a reputable provider (Hetzner). The absence of open ports and lack of threat indicators supports benign classification. Continue routine monitoring within standard thresholds.
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-FSN1 |
| CIDR Block | 46.224.160.0/20 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.125.164.224.46.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.125.164.224.46.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 2 โ Moderate operator sophistication with routing hygiene |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 38% | 4 | 5 |
| services | 19% | 2 | 2 |
| ownership | 32% | 3 | 4 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 2 |
| Overall | 29% | 14 | 20 |
| Data Coherence | Consistent (100%) |
| Attribution | High (100%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-25 08:45:36 UTC |
| Last Seen | 2026-08-12 19:37:38 UTC |
| Profile Built | 2026-08-12 19:45:40 UTC |
| Data Freshness | Live |
| Signal Types | 31 |
| Total Observations | 32 |
Full dossier details are available via our API.