157.90.228.59📋 Copy

# IP Intelligence Briefing: 157.90.228.59

## Executive Summary

Intellect assessment of 157.90.228.59 indicates a low-risk cloud infrastructure IP hosted by Hetzner Online GmbH (ASN 24940). The IP is geolocated to Nuremberg, Germany, and operates within the CLOUD-NBG1 network. No active threat indicators detected; however, minor DNSBL presence and historical blacklist activity warrant monitoring.

## Ownership & Infrastructure

• ASN: 24940 (Hetzner Online GmbH)
• Network: 157.90.224.0/20 (CLOUD-NBG1)
• Organization: Hetzner Online GmbH – Contact Role
• Registry: ARIN
• Infrastructure Type: Cloud Compute
• Status: Firewalled / No Services Detected

## Geolocation

• Country: Germany (DE)
• Region: Bavaria
• City: Nuremberg
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin
• GeoValidation: Plausible

## DNS & Reverse Resolution

• PTR Hostname: static.59.228.90.157.clients.your-server.de
• Forward Resolution: Confirmed
• Domain: your-server.de
• DNSSEC: Valid
• CAA Records: Present (2 issuers)
• Email Auth: SPF and DMARC records present

## Threat Profile

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not elevated
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Threat Indicators: None

## Services & Ports

• Open Ports: None detected
• TLS Certificate: Not exposed
• HTTP Title: Not available
• Classification: Infrastructure/Cloud (No public services)

## Historical Observations (15 Signals)

Recent observation activity from 2026-08-06 includes:

• DNSSEC validation confirmed (dnssec_valid: true)
• CAA records present with multiple issuers
• ASN and prefix information consistent (157.90.0.0/16)
• Blacklist listings detected with high severity classification
• No persistent malicious behavior observed

## Network Relationships

Five relationships identified:

• Multiple "Same Network" associations to CLOUD-NBG1 subnet
• DNS associations to static.59.228.90.157.clients.your-server.de

## Neighborhood Analysis (/24 Subnet)

• Subnet: 157.90.228.0/24
• Abuse Density: 0
• Neighbor Count: 0
• Risk Distribution: Even (0 high/medium/low)
• Threat Siblings: None detected

## Recommended Actions

Based on current risk profile (score 25/100):

• Allow Traffic: IP shows legitimate cloud infrastructure characteristics
• Monitor: Observe for changes in DNSBL status or threat indicators
• No Blocking Required: No active threat indicators present
• Standard Logging: Implement standard firewall logging per organizational policy

## SOC Assessment

The IP address represents standard cloud hosting infrastructure with Hetzner. The absence of open ports and threat indicators suggests legitimate use. The single DNSBL listing and historical blacklist activity are consistent with cloud provider infrastructure and do not indicate active malicious behavior. Continue standard monitoring procedures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.