89.167.114.225
Intelligence Briefing: 89.167.114.225
The target IP 89.167.114.225 was identified as a low-risk endpoint with a risk score of 0. Ownership records attributed the address to Hetzner Online GmbH (ASN 24940) within the CLOUD-HEL1 block, registered in Gunzenhausen, Bavaria, Germany. The network role was classified as cloud compute hosting with no indicators of proxy, VPN, or Tor usage.
Active services included open ports 443/tcp (HTTPS) and 22/tcp (SSH). Banner analysis for the SSH service displayed OpenSSH version 9.6p1 on Ubuntu. TLS inspection identified a certificate issued to CN=pro.lkjhgfdsa.shop with Organization Iranux and Country New Zealand (NZ). DNS reverse resolution pointed to static.225.114.167.89.clients.your-server.de, while forward resolution confirmed the domain your-server.de. Email authentication records indicated the presence of SPF and DMARC policies.
Threat intelligence feeds returned no active indicators, blacklist entries, or known campaign associations. Data indicated zero abuse confidence scores. While the infrastructure location remained consistent with the hosting provider, the TLS certificate issuer location (NZ) differed from the IP geolocation (DE). No immediate malicious activity was observed during the assessment.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-HEL1 |
| CIDR Block | 89.167.112.0/20 |
| RIR | RIPE |
| Country | FI |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | static.225.114.167.89.clients.your-server.de |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | static.225.114.167.89.clients.your-server.de |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2026-03-08T21:53:58+00:00 |
| Valid Until | 2036-03-05T21:53:58+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 3650 days |
| Serial Number | 41A7A2C99D41ADFBFA0FDCD3D3206776B7014D72 |
| Thumbprint | F742699230EF12CC0228531C1187EBCB96BC9823 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 2 | 3 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims NZ but primary geo says DE
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-13 00:40:57 UTC |
| Last Seen | 2026-08-27 09:40:36 UTC |
| Profile Built | 2026-08-29 17:59:29 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 28 |
Full dossier details are available via our API.