167.233.253.96📋 Copy

IP Intelligence Briefing: 167.233.253.96/32

Executive Summary

IP address 167.233.253.96 is hosted on Hetzner Online GmbH's CLOUD-NBG1 network (ASN 24940) within Germany. The address carries a moderate risk score of 50 and is listed on 2 of 8 DNSBL feeds. The IP is classified as cloud hosting infrastructure with no open services detected.

Ownership and Network Context

The address belongs to Hetzner Online GmbH under the CLOUD-NBG1 CIDR block (167.233.240.0/20). Geolocation data indicates placement in Germany (DE). The network is registered with ARIN, and ownership signals show 95% confidence levels. The infrastructure operates as cloud compute hosting with firewalled/no-service characteristics.

DNS and Infrastructure

Reverse DNS resolution maps to static.96.253.233.167.clients.your-server.de (your-server.de domain). Forward confirmation is verified. The address has no open ports or active TLS certificates. Control plane analysis shows 2 route changes in the last 30 days with non-stable routing.

Threat Indicators

The IP appears on 2 DNSBL lists out of 8 total checks, including high-severity listings. No active threat indicators, known campaigns, or Tor exit node characteristics were detected. Blacklist confidence scores indicate elevated reputation concerns despite the moderate overall risk classification.

Observation History

Fourteen signal observations were recorded. Recent signals include:

• Ownership confirmation (ARIN, Hetzner) with 95% confidence
• Geolocation data consistent with German hosting
• Multiple blacklist listings with high severity ratings

Network Neighborhood

Analysis of the /24 subnet (167.233.253.0/24) revealed no sibling IPs. The subnet showed zero active siblings and zero abuse density, suggesting isolated deployment rather than coordinated infrastructure.

Relationships

The address maintains DNS associations with static.96.253.233.167.clients.your-server.de and network-level association with CLOUD-NBG1. No additional related entities were identified.

Recommended Actions

Based on risk profile, the following controls are recommended:

• Firewall: DROP all traffic from 167.233.253.96
• WAF: Block at application level for Cloudflare and AWS WAF deployments
• The address should be evaluated for blocking pending additional correlation with threat intelligence feeds

Classification

• Risk Level: Moderate (50)
• Infrastructure: Cloud Hosting
• Geographic: Germany
• Status: Listed on 2 DNSBL feeds
• Services: None detected (firewalled)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.