89.167.114.179📋 Copy

# INTELLIGENCE BRIEFING: 89.167.114.179

Classification: Moderate Risk

Risk Score: 50/100

Date: August 6, 2026

---

## EXECUTIVE SUMMARY

IP address 89.167.114.179 is a cloud computing infrastructure endpoint operated by Hetzner Online GmbH. The IP demonstrates moderate risk characteristics with no direct threat indicators but is listed on 2 of 8 DNS blacklist sources. Infrastructure classification indicates web hosting services with standard web server and SSH access.

---

## INFRASTRUCTURE PROFILE

---

## NETWORK ROLE & SERVICES

Primary Function: Web Server/Hosting Environment

• Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS), TCP/22 (SSH), TCP/8080 (HTTP-ALT)
• Server Software: nginx/1.24.0 (Ubuntu)
• TLS Certificate: Let's Encrypt (n8n.rachidakkari.com)
• PTR Hostname: static.179.114.167.89.clients.your-server.de
• DNS Resolution: Forward confirmed to your-server.de

---

## THREAT ASSESSMENT

Direct Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy/VPN: No
• Direct Blacklist Hits: 0
• DNSBL Listings: 2 of 8 total lists

Temporal Analysis:

• Ownership Persistence: Stable (no ownership changes observed)
• Threat Persistence: 0 days
• Observation Count: 17 signals recorded
• Persistently Malicious: No

---

## NEIGHBORHOOD ANALYSIS

Subnet: 89.167.114.179/24

• Abuse Density: 0.5 (low)
• Classification: mostly_clean
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 1

Adjacent IP Assessment:

• 89.167.114.83: Risk Score 25 (Low Risk)

---

## RELATIONSHIP GRAPH

DNS Associations:

• static.179.114.167.89.clients.your-server.de (multiple records)

Network Associations:

• CLOUD-HEL1 (same network prefix)

---

## RECOMMENDED ACTIONS

Risk Score 50 triggers blocking recommendations across security platforms:

Recommendation: Block traffic at perimeter. The moderate risk score combined with DNSBL listings warrants defensive action, though the IP lacks direct threat indicators. Monitor for sustained malicious activity patterns before permanent blocking.

---

## INTELLIGENCE NOTES

• IP represents legitimate cloud infrastructure (Hetzner hosting)
• Low neighborhood abuse density suggests limited subnet-wide threat activity
• No historical evidence of persistent malicious behavior
• Primary concern: DNSBL listings indicate prior reputation issues
• Consider context-based blocking rather than permanent takedown

Analyst: IPDebrief Automated Analysis

Status: Ready for SOC integration

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.