157.90.134.221📋 Copy

IP Intelligence Briefing: 157.90.134.221

Date: June 16, 2026

---

**1. Core Profile**

• Risk Assessment:

- Overall Risk Score: 25 (Low Risk)

- Provider Score: 0 (No known malicious provider activity)

- Authority Score: 0 (Not a known authoritative node)

- Stability: Stable ownership (no recent changes).

• Ownership:

- AS: AS24940 (Hetzner Online GmbH)

- Organization: Hetzner Online GmbH (Germany)

- Subnet: 157.90.0.0/16 (registered to Hetzner)

- Geolocation: Falkenstein, Saxony, Germany (51.17°N, 10.45°E).

• Network Role:

- Cloud compute instance (hosted, no residential/mobile indicators).

- No active services detected (no open ports, TLS certs, or HTTP banners).

---

**2. Threat Observations**

• Historical Activity (Last 30 Days):

- 21 observations noted, with 16 from June 12–16, 2026.

- Geolocation Inference: Confirmed Germany (confidence: 52%), but no precise city/region.

- Threat Signals:

- AlienVault OTX flagged 4 "pulse" events (likely benign, no confirmed malicious activity).

- No blacklisted IPs, spam sources, or Tor exit nodes.

- DNS: PTR record resolves to `static.221.134.90.157.clients.your-server.de` (no malicious domains).

• Malicious Indicators:

- No known attacker campaigns, spam, or malware associations.

- DNSBL: Listed in 1 of 8 DNSBLs (low priority).

---

**3. Network Relationships**

• Linked Entities:

- Subnet: 157.90.0.0/16 (Hetzner-owned, no abuse reported).

- DNS: Associated with `your-server.de` (SPF/DKIM configured, no email threats).

- BGP: Prefix `157.90.0.0/16` shows stable routing (no recent changes).

---

**4. Neighborhood Analysis**

• Subnet: 157.90.134.221/24
• Neighbor Risk:

- 0 active neighbors detected.

- Abuse Density: 0% (clean subnet).

---

**5. Recommendations**

• Monitoring:

- Continue routine monitoring for unexpected DNS changes or service activation.

- Validate geolocation accuracy if the IP is used for region-specific compliance.

• Security Actions:

- No immediate firewall rules or blocks required.

- Ensure DNSSEC and SPF/DKIM are enforced for associated domains.

Conclusion:

This IP is a legitimate Hetzner-hosted cloud instance with no current malicious activity. Historical signals suggest low-risk behavior, but ongoing monitoring is advised for any anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.