89.167.47.59📋 Copy

# IP Intelligence Briefing: 89.167.47.59/32

Classification: Moderate Risk Infrastructure | Provider: Hetzner Online GmbH | Jurisdiction: Finland (FI)

## Executive Summary

IP address 89.167.47.59 is classified as moderate risk (score: 40/100). The address is hosted on Hetzner Online GmbH infrastructure and resolves to your-server.de domains. The IP shows cloud hosting characteristics with no active open services detected. Historical data indicates potential geographic inconsistencies between Finland and Germany associations.

## Technical Profile

• ASN: 24940 (Hetzner Online GmbH)
• Network: 89.167.0.0/17
• Geolocation: Gunzenhausen, Bavaria, FI (61.92°N, 25.75°E) | Accuracy: 750km
• Infrastructure Type: Cloud Compute / Hosting
• DNS Record: static.59.47.167.89.clients.your-server.de (your-server.de)
• Open Ports: None detected
• TLS/Certificates: None observed

## Threat Indicators

• Risk Score: 40/100 (Moderate)
• Abuse Confidence Score: Not calculated
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 2 DNSBL listings (out of 8 total lists)
• Threat Feeds: No active indicators
• Campaigns: No known associations

## Historical Context

Analysis of 19 signal observations reveals:

• Provider signals consistently identify Hetzner (confidence: 85%)
• Geographic signals show Finland location with 28% confidence
• Historical data includes Germany (DE) associations from AlienVault OTX sources with 6 threat pulses
• Operator score: 0.3478 (Basic classification)
• DNSSEC valid, CAA records present
• Route stability flagged as false; 0 route changes in 30 days

## Related Infrastructure

• DNS Associations: static.59.47.167.89.clients.your-server.de (41 total relationship records)
• Network Context: CLOUD-HEL1 (Hetzner cloud environment)
• Subnet Analysis: 89.167.47.0/24

- Abuse Density: 0 (clean subnet)

- Risk Distribution: No high/medium risk neighbors

- Active Siblings: 0

## Recommended Actions

Based on the risk profile, the following defensive measures are available:

Firewall Blocking:

• iptables: `iptables -A INPUT -s 89.167.47.59 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 89.167.47.59 drop`
• Nginx: `deny 89.167.47.59;`

Cloud/WAF Blocking:

• Cloudflare WAF: Block 89.167.47.59 (risk score 40)
• AWS WAF: Add 89.167.47.59/32 to block list

## Analyst Notes

The moderate risk score is primarily driven by DNSBL listings rather than active threat indicators. The IP is associated with Hetzner cloud infrastructure and your-server.de hostnames. Geographic inconsistencies between Finland and Germany associations warrant monitoring. The subnet environment (89.167.47.0/24) shows no abuse density, suggesting isolated activity rather than coordinated infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.