128.140.114.57📋 Copy

IP INTELLIGENCE BRIEFING: 128.140.114.57/32

Date: 2026-08-13

Classification: LOW RISK

---

EXECUTIVE SUMMARY

The target IP 128.140.114.57 is associated with Hetzner Online GmbH cloud infrastructure (ASN 24940, CLOUD-FSN1 network). The IP carries a low risk score of 15/100 and demonstrates minimal threat indicators. No active services or open ports were detected on this host.

OWNERSHIP & INFRASTRUCTURE

• Provider: Hetzner Online GmbH
• ASN: 24940 (Hetzner)
• Network: 128.140.112.0/20 (CLOUD-FSN1)
• Infrastructure Type: CloudCompute
• Classification: Cloud hosting environment

GEOLOCATION DATA

• Primary Location: Tabriz, DE (Germany)
• Alternative Signal: Tabriz, IR (Iran) - noted in historical data
• Note: Geographic data shows inconsistent reporting across sources. Location consensus is false.

THREAT INDICATORS

• Risk Score: 15 (Low Risk)
• Abuse Confidence Score: Not applicable
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Status: Listed on 1 of 8 DNSBLs (medium severity)

NETWORK ACTIVITY

• Open Ports: None detected
• Service Status: Firewalled / No Services
• DNS Resolution: static.57.114.140.128.clients.your-server.de
• Domain Association: your-server.de

NEIGHBORHOOD ANALYSIS

• Subnet: 128.140.114.57/24
• Abuse Density: 0 (clean)
• Threat Siblings: 0
• Classification: Clean
• Risk Distribution: All neighbors classified as low risk

OBSERVATION HISTORY

Historical analysis of 24 observations indicates:

• Consistent cloud infrastructure classification (Hetzner provider)
• One signal recorded DNS blacklist presence (1 listing, medium severity)
• Operator score rated as "Basic" (0.3478)
• No persistent malicious behavior detected
• Ownership stability maintained with no changes recorded

RELATIONSHIP MAPPING

• DNS Associations: your-server.de hostnames
• Network Associations: CLOUD-FSN1 subnet
• No malicious relationship indicators detected

RECOMMENDED ACTIONS

Risk Assessment: LOW

No firewall rules or mitigation actions are recommended at this time. The IP demonstrates a low-risk profile with no active threat indicators. Standard cloud hosting infrastructure behavior is observed.

SOC Analyst Notes:

• Monitor for changes in blacklist status
• Geographic location data shows inconsistency - verify with additional sources if investigation continues
• No immediate blocking or filtering required
• Consider context of why this IP was initially flagged for analysis

---

End of Intelligence Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.