89.167.124.197📋 Copy

IP Intelligence Briefing: 89.167.124.197

*Generated from IPDebrief analysis*

1. Risk Profile

• Risk Score: 50 (Moderate Risk)
• Provider: Hetzner Online GmbH (ASN 24940)
• Geolocation: Registered to Finland (FI), but geolocation data indicates a location in Bavaria, Germany (city: Gunzenhausen). Timezone matches Finland (Europe/Helsinki).
• Network Role: Hosting provider (cloud infrastructure, not residential or mobile).
• Threat Indicators: No malicious indicators, blacklists, or campaigns detected.

2. Network & DNS

• Open Services: SSH (port 22) with banner "SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.2".
• DNS: PTR record points to `static.197.124.167.89.clients.your-server.de` (domain: `your-server.de`).
• Subnet: 89.167.124.197/24. Neighboring IPs include 89.167.124.202 (risk score: 25). Subnet abuse density: 0% (clean).

3. Historical Observations

• No significant changes in risk scores or threat signals over the last 30 days.
• Consistent ownership by Hetzner Online GmbH.

4. Relationships

• Linked to network `CLOUD-HEL1` (same infrastructure).
• DNS associations with `your-server.de` (SPF/DKIM validation enabled).

5. Recommended Actions

• Firewall Rules:

- Block the IP using:

```bash

iptables -A INPUT -s 89.167.124.197 -j DROP

nft add rule inet filter input ip saddr 89.167.124.197 drop

```

- Cloudflare/WAF:

```json

{"action": "block", "filter": {"expression": "ip.src eq 89.167.124.197"}}

```

• Monitoring: Track subnet neighbors (e.g., 89.167.124.202) for anomalies.

6. Context & Notes

• IP is part of Hetzner's cloud infrastructure, likely a single-service host.
• Geolocation discrepancy (Finland vs. Bavaria) may require further validation.
• No direct threat indicators, but hosting providers can host malicious activity. Monitor for unexpected service changes.

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.