116.203.156.114📋 Copy

## IP Intelligence Briefing: 116.203.156.114/32

Classification: Hosting Infrastructure IP

Risk Level: Low Risk (Score: 15)

Reporting Period: Current Profile with Historical Context

---

Executive Summary

Target 116.203.156.114 is a Hetzner-hosted infrastructure IP located in Nuremberg, Germany. The IP operates within a mostly clean subnet (abuse density: 0) but shows limited DNSBL listings. Historical data indicates intermittent reputation fluctuations with recent listing activity in June 2026.

---

Technical Profile

Network Assignment:

• Organization: Hetzner Online GmbH (ASN: 24940)
• Country/Region: Germany, Bavaria, Nuremberg
• Geolocation Confidence: Plausible (400km accuracy radius)
• Network Classification: Hosting infrastructure with firewalled/no services

DNS Configuration:

• PTR Record: static.114.156.203.116.clients.your-server.de
• Domain: your-server.de
• Forward Resolution: Confirmed (1 record)
• Email Authentication: SPF record present
• CAA Records: Active (2 issuers)

Control Plane:

• BGP Prefix: 116.203.0.0/16
• Route Stability: Unstable (route changes detected)
• DNSSEC: Valid
• DNSBL Status: Listed on 1 of 8 reputation feeds (max severity: high)

---

Threat Assessment

Current Indicators:

• No active threat campaigns identified
• Not classified as Tor exit node, proxy, or known attacker
• No open ports detected (service banner: firewalled)
• TLS certificate: Not present
• HTTP service: Not active

Historical Activity (24 observations):

• Recent Listings: 2 blacklist entries observed 2026-06-28 (max severity: high)
• Earlier Activity: 1 listing entry 2026-06-20 (max severity: medium)
• Threat Persistence: 1 observation recorded
• Operator Score: 0.3478 (Basic classification)

---

Network Context

Subnet Analysis (116.203.156.0/24):

• Abuse Density: 0 (mostly clean)
• Total Siblings: 2 active IPs
• Threat Siblings: 2
• Inherited Risk Score: 5

Related Neighbor:

• 116.203.156.226: Risk Score 40, Authority Score 60
• Classification: Medium risk neighbor within same /24

Relationship Graph: 38 associated relationships identified

• DNS associations to your-server.de hostnames
• Network association: CLOUD-NBG1 (Hetzner datacenter)

---

Recommended Actions

Immediate:

• Monitor DNSBL listing status for your-server.de domain
• Evaluate traffic patterns from this IP against known malicious activity

Defensive Posture:

• No immediate blocking recommended based on current risk profile
• Implement monitoring for anomalous behavior patterns
• Track subnet-level activity changes for 116.203.156.0/24

Contextual Notes:

• IP serves legitimate hosting infrastructure
• Limited threat indicators despite DNSBL presence
• Neighbor IP (116.203.156.226) shows elevated risk and warrants separate assessment

---

Analyst Notes: The combination of Hetzner hosting infrastructure with minimal open services and low overall risk score suggests this IP is part of legitimate cloud operations. The DNSBL listing warrants monitoring but does not indicate active compromise. Subnet context shows mixed risk distribution with one medium-risk neighbor.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.