77.42.114.119📋 Copy

# Intelligence Briefing: 77.42.114.119/32

## Executive Summary

IP 77.42.114.119 operates within Hetzner Online GmbH infrastructure (AS24940) in Helsinki, Finland. The address presents low-risk characteristics with a risk score of 25 and minimal threat indicators. No known attacker, spam source, or Tor exit node behavior detected.

## Ownership and Infrastructure

• Provider: Hetzner Online GmbH
• ASN: 24940 (DE-HETZNER-20061204)
• CIDR Block: 77.42.0.0/17
• RIR: Ripe
• Infrastructure Type: Cloud compute hosting environment
• Network Role: Web server with hosting services

## Geolocation

• Country: Finland (FI)
• Region: Uusimaa
• City: Helsinki
• Timezone: Europe/Helsinki
• GeoConsensus: Validated across multiple sources

## Network Services and Fingerprinting

• Open Ports: 80/tcp (HTTP), 443/tcp (HTTPS), 22/tcp (SSH)
• SSH Banner: OpenSSH_9.2p1 Debian-2+deb12u10
• Web Server: Apache
• TLS Certificate: Let's Encrypt (R12, US), issued for pbx.firefli.net
• HTTP Redirect: 302 response observed
• DNS PTR: static.119.114.42.77.clients.your-server.de

## Threat Intelligence Indicators

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not applicable
• Blacklist Count: 0
• Known Campaigns: None detected
• DNSBL Status: Listed on 1 of 8 monitored lists
• Campaign Likelihood: None
• Threat Feeds: No correlations

## DNS and Email Security

• SPF Records: Configured (v=spf1 include:_spf.google.com a:mx.firefli.net ~all for firefli.net; v=spf1 mx -all for your-server.de)
• DMARC: Present on your-server.de (p=none policy)
• CAA Records: Active (2 issuers)
• DNSSEC: Valid

## Historical Observations

Analysis of 26 observations indicates stable infrastructure with:

• Persistent SPF/DMARC configurations across your-server.de and firefli.net domains
• Consistent Apache server fingerprinting
• HTTP 302 redirects maintained
• No escalation in threat signals over time
• Risk persistence: 0 days (not persistently malicious)

## Neighborhood Assessment

• Subnet: 77.42.114.0.0/24
• Abuse Density: 1 (minimal)
• Classification: Mostly clean
• Threat Siblings: 1
• Active Siblings: 1

## Relationships

• DNS Associations: Multiple PTR records to static.119.114.42.77.clients.your-server.de
• Network Relationships: Associated with DE-HETZNER-20061204 network block
• No External Entity Links: No certificates, organizations, or related IP correlations beyond network scope

## Assessment and Recommendations

The IP address demonstrates characteristics of a legitimate cloud hosting environment with standard security configurations in place. The low risk score, absence of threat indicators, and minimal neighborhood abuse density support classification as low-risk infrastructure.

Recommended Actions: Monitor for any changes in DNS configurations or threat indicator emergence. Current posture does not warrant immediate blocking or restrictive firewall rules.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.