88.198.20.29📋 Copy

## IP Intelligence Briefing: 88.198.20.29/32

Executive Summary

The target IP 88.198.20.29 is a low-risk (risk score: 25) web hosting address operated by Hetzner Online GmbH in Falkenstein, Germany. The IP resolves to a Your-Server.de reseller-hosted infrastructure with Apache web server services. No active malicious indicators were identified, though the associated domain name warrants monitoring.

Ownership and Infrastructure

• Organization: Hetzner Online GmbH (ASN 24940)
• Network: HETZNER-RZ-NBG-NET (88.198.16.0/20)
• Host Provider: Your-Server.de (reseller hosting)
• Resolution: static.88-198-20-29.clients.your-server.de
• Infrastructure Type: CloudCompute / Hosting Provider

Network Services

Open ports identified:

• TCP/80 (HTTP)
• TCP/443 (HTTPS)
• TCP/22 (SSH - OpenSSH 9.6p1 Ubuntu)

TLS Certificate details:

• Issuer: Let's Encrypt (CN=YE1, O=Let's Encrypt, C=US)
• Subject: blbanking.de
• SANs: blbanking.de, neu.blbanking.de, www.blbanking.de

Threat Assessment

Risk Score: 25/100 (Low Risk)

• DNSBL Status: Listed on 1 of 8 threat lists
• Threat Feeds: No active indicators
• Campaign Association: None detected
• Known Attacker Status: Not identified
• Tor Exit Node: No
• Proxy/VPN: Not detected

Geolocation: Falkenstein, Saxony, Germany (51.17°N, 10.45°E)

Historical Observations

Analysis of 21 signal observations indicates consistent low-risk behavior:

• Recent subnet classification: mostly_clean
• No persistent malicious activity detected
• HTTP probing shows 302 redirect responses (status code)
• Average ownership stability maintained

Neighborhood Analysis

Subnet 88.198.20.0/24 analysis:

• Abuse Density: 0 (mostly clean)
• Risk Distribution: No high-risk neighbors identified
• Active Siblings: 1
• Threat Siblings: 1

Associated Entities

DNS associations link to:

• static.88-198-20-29.clients.your-server.de (multiple records)
• Network affiliation: HETZNER-RZ-NBG-NET

Recommended Actions

No immediate mitigation actions required based on current risk profile. Standard network hygiene applies:

• Monitor for TLS certificate changes (blbanking.de domain)
• Standard logging recommended for web traffic
• No blocking recommended at this time

Analyst Notes

The blbanking.de domain name is unusual and may warrant correlation with other threat intelligence. However, the IP itself shows no active malicious indicators. The Hetzner cloud infrastructure and Your-Server.de hosting association suggest legitimate web hosting operations. Continue monitoring for changes in threat indicators or DNS certificate updates.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.