88.198.64.173📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 88.198.64.173/32

Classification: Moderate Risk Web Infrastructure

Report Date: June 14, 2026

---

## EXECUTIVE SUMMARY

IP 88.198.64.173 is a German web hosting endpoint operating within the Hetzner Online GmbH cloud infrastructure. The IP presents a moderate risk profile (55/100) with evidence of infrastructure hosting services. While the IP itself is not flagged as a direct threat source, neighborhood analysis indicates the presence of one malicious sibling in the same /24 subnet.

---

## INFRASTRUCTURE PROFILE

---

## NETWORK SERVICES

TLS Certificate Analysis:

• Issuer: Let's Encrypt (R13)
• Subject: panel.bluost.net
• Certificate Type: Valid, not self-signed

Server Fingerprint:

• Web Server: Apache
• Management Platform: PleskLin
• HTTP Version: 1.1
• Status Code: 303 (Redirection)
• Security Headers: X-Frame-Options: SAMEORIGIN

---

## EMAIL AUTHENTICATION

• SPF: Configured
• DMARC: Configured
• PTR Hostname: mail.bluost.net
• Forward Resolution: mail.bluost.net

---

## THREAT ASSESSMENT

Risk Score: 55 (Moderate Risk)

Threat Indicators:

• No active threat indicators detected
• Not a Tor exit node
• Not classified as a known attacker
• Not a spam source
• Zero active blacklist entries

Control Plane Metrics:

• DNSBL Listings: 3 (of 8 total lists)
• Operator Score: 0.2609 (Basic)
• Route Stability: False
• RPKI State: Not validated

---

## SUBNET ANALYSIS

Neighborhood: 88.198.64.173/24

• Abuse Density: 1/10 (Low)
• Classification: Mostly Clean
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1

Neighboring IP Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 0

---

## OBSERVATION HISTORY

Total Observations: 23 signals recorded

Most Recent Activity: June 14, 2026

Key Historical Signals:

• HTTP response fingerprinting (PleskLin generator)
• Geolocation inference (Germany, 400km accuracy radius)
• DNSSEC validation status
• HTTP security header configuration

Temporal Indicators:

• Threat Persistence Days: 0
• Ownership Changes: 0
• Persistently Malicious: False

---

## RELATIONSHIP MAPPING

Total Relationships Identified: 45

Key Associations:

• Network: HETZNER-ONLINE-AG-EIGENE-NETZE (Same Network)
• DNS: mail.bluost.net (DNS Association)

---

## RECOMMENDED ACTIONS

Security Posture: Monitor

Classification: Low-Priority Infrastructure

Recommended Monitoring:

1. Track 88.198.64.0/24 for emerging threats (1 threat sibling present)

2. Monitor mail.bluost.net domain for abuse indicators

3. Review 3 DNSBL listings for context and potential false positives

No immediate blocking recommended. The IP operates as legitimate web hosting infrastructure with no direct threat indicators. Monitor neighborhood for related malicious activity.

---

Analysis Tool: IPDebrief

Data Confidence: High (Multi-source consensus)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.