49.12.123.4📋 Copy

IP Intelligence Briefing: 49.12.123.4

Date: 2026-06-10

---

**1. Core Profile**

• Risk Score: Low Risk (30/100)
• Provider: Hetzner Online GmbH (ASN 24940)
• Geolocation: Falkenstein, Saxony, Germany (51.17°N, 10.45°E)
• Network Role: Cloud Hosting (Infrastructure Type: CloudCompute)
• Services:

- Open Ports: 80 (HTTP), 443 (HTTPS), 22 (SSH), 8080 (HTTP-alt)

- TLS Certificate: Self-signed (CN=TRAEFIK DEFAULT CERT), SANs include internal domains.

- HTTP Title: N/A

- SSH Banner: "SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u9"

---

**2. Threat & Abuse Indicators**

• Malicious Activity: None detected (no indicators, blacklists, or campaigns).
• DNS Records:

- PTR: `static.4.123.12.49.clients.your-server.de`

- Hostname: `your-server.de` (SPF/DKIM: Valid, no email spoofing detected).

• Network Neighbors:

- Subnet: `49.12.123.4/24` (abuse density: 0%, no active siblings).

• BGP/Control Plane:

- Origin ASN: 24940 (Hetzner), route stable.

- DNSSEC: Valid, CAA records present.

---

**3. Observation History (Last 30 Days)**

• Stability: No route changes; IP has been consistently registered to Hetzner.
• Service Changes:

- TLS certificate scanned on 2026-06-01 (self-signed, no revoked certificates).

- HTTP/HTTPS services active; no 404/500 errors noted.

• Threat Signals: No spikes in DNS queries, scans, or abuse confidence scores.

---

**4. Relationships & Context**

• DNS Associations:

- Linked to `static.4.123.12.49.clients.your-server.de` (hostname: `your-server.de`).

• Network Affiliation:

- Same ASN (Hetzner Online GmbH) and network (`DE-HETZNER-20101021`).

• Certificates: No external CA-signed certificates detected.

---

**5. Recommendations**

• Monitor:

- Track TLS certificate validity and renewal (self-signed certs require manual management).

- Ensure SSH access is restricted to authorized IPs.

• Firewall Rules:

- Allow traffic on ports 80, 443, 22 (if necessary).

- Block port 8080 unless explicitly required.

• Verification: Confirm the hostname `your-server.de` is legitimate and not spoofed.

---

Conclusion:

This IP is associated with a legitimate Hetzner cloud-hosted server, running standard web/SSH services. No malicious activity or abuse indicators detected. The self-signed TLS certificate suggests an internal or development setup, but further validation is recommended. No immediate action required; monitor for anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.