89.167.40.16📋 Copy

IP INTELLIGENCE BRIEFING: 89.167.40.16/32

Executive Summary

IP 89.167.40.16 is a cloud computing host operated by Hetzner Online GmbH within Germany's RIPE registry. The IP exhibits moderate risk characteristics (score: 40) with no active malicious indicators. No services are exposed; the endpoint is firewalled. The subnet demonstrates clean abuse density with no threat siblings.

Infrastructure Profile

• Organization: Hetzner Online GmbH - Contact Role
• ASN: 24940
• CIDR Block: 89.167.32.0/20
• Infrastructure Type: CloudCompute
• Geolocation: Bavaria, Germany (Gunzenhausen, 51.17°N, 10.45°E)
• Timezone: Europe/Berlin
• Network Role: Firewalled / No Services

DNS & Resolution

• PTR Hostname: static.16.40.167.89.clients.your-server.de
• Forward Resolution: Confirmed to static.16.40.167.89.clients.your-server.de
• Domain: your-server.de
• Forward Resolution Count: 1
• DNSSEC: Valid
• CAA Records: Present

Threat Indicators

• Risk Score: 40 (Moderate)
• Abuse Confidence Score: Not applicable
• Blacklist Status: Listed on 2 of 8 DNSBLs
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None detected
• Persistence: No persistent malicious activity observed
• Stability: Ownership stable; no recent changes

Neighborhood Assessment

• Subnet: 89.167.40.16/24
• Abuse Density: 0 (Clean)
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 0
• Classification: Clean

Relationship Graph

• DNS Association: static.16.40.167.89.clients.your-server.de
• Network Association: CLOUD-HEL1
• No external entity relationships detected

Observation History

Fifteen observations recorded. Recent signals confirm cloud infrastructure classification, clean subnet status, and stable ownership. One geolocation probe with low confidence flagged Finland, but consensus data indicates Germany. No threat persistence or escalation observed.

Recommendations

No immediate blocking required. The IP represents legitimate cloud infrastructure from a reputable provider. Monitor for service exposure if firewall rules change. The DNSBL listings warrant periodic review but do not indicate active malicious activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.