IPDebrief

167.233.55.90

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

INTEL BRIEFING: 167.233.55.90/32

Classification: Low Risk / Infrastructure Host

IP Address: 167.233.55.90

Overview:

The target IP resolved to a low-risk profile with a risk score of 0. Ownership attribution assigned ASN 24940 (Hetzner Online GmbH) under the netname CLOUD-FSN1, registered within the ARIN RIR. The IP resides in the 167.233.48.0/20 CIDR block.

Geolocation:

Geolocation data placed the IP in Germany (DE) at coordinates 51.17°N, 10.45°E, with timezone Europe/Berlin. Geo validation indicated false status with a 400km accuracy radius.

Network Classification:

The IP resolved as hosting infrastructure with the service purpose marked as "Firewalled / No Services." No open ports were detected. The PTR hostname resolved to static.90.55.233.167.clients.your-server.de with forward resolution confirmed. DNS configuration includes SPF and DMARC records.

Threat Indicators:

Threat analysis returned no indicators. The IP is not identified as a Tor exit node, known attacker, or spam source. Blacklist count recorded 0. No threat feeds or known campaign matches were found. Abuse confidence score was null.

Control Plane:

Control plane data showed origin ASN 24940 with BGP prefix 167.233.0.0/16. The route was not stable with 0 route changes in the last 30 days. RPKI state and IRR consistency data were null. DNSSEC validation passed. DNSBL listing count was 0 across 8 total lists. Operator score calculated at 0.3478 with operator label "Basic".

Historical Signals:

Observation history contained 21 signals. Recent observations from 2026-08-05 showed no ownership changes, 0 threat persistence days, and 0 threat observation count. The IP is not persistently malicious.

Subnet Neighborhood:

The /24 subnet (167.233.55.90/24) showed abuse density of 1 with classification "mostly_clean." Total siblings recorded 1 with 1 active sibling and 1 threat sibling. Inherited risk score of 2. Risk distribution across the subnet showed 0 high, 0 medium, and 0 low risk neighbors.

Relationship Graph:

The IP maintained DNS associations to hostname static.90.55.233.167.clients.your-server.de and same network relationships to CLOUD-FSN1. Fifteen relationship entries were recorded.

Campaign Analysis:

Campaign likelihood assessed as "none" with 0 certificate matches, 0 banner matches, and 0 correlated IPs. No certificate subjects were identified.

Recommended Actions:

Risk score of 0 resulted in no recommended security actions or firewall rules. The IP profile indicates no immediate threat requiring mitigation.

Intelligence Summary:

The IP 167.233.55.90 represents standard hosting infrastructure from Hetzner Online GmbH in Germany. No malicious activity, open services, or threat indicators were detected. The subnet shows low abuse density. No immediate action required based on current intelligence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
Regionโ€”
CityBerlin
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

๐Ÿข Ownership & Registration

OrganizationHetzner Online GmbH - Contact Role
ASNAS24940
Network NameCLOUD-FSN1
CIDR Block167.233.48.0/20
RIRARIN
CountryDE
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRstatic.90.55.233.167.clients.your-server.de
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesstatic.90.55.233.167.clients.your-server.de

๐Ÿ” DNS Hygiene

Hygiene Score100% (Excellent)
SPF1/2 domains
DMARC1/2 domains
FCrDNSVerified
DNSSECValid
CAAPresent
Domains Checked2 domains

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierTier 3 โ€” Basic operator with some routing infrastructure
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

A self-signed certificate was detected. This is common for development servers, internal services, or IoT devices.
โš ๏ธ
CN=TRAEFIK DEFAULT CERT
Issued by CN=TRAEFIK DEFAULT CERT
Self-signed: Yes
SANs22ce02152831a37b98e9fc901c38ad21.8f25e804ca5fcf3f2125225828c48e58.traefik.default
Valid From2026-08-05T16:31:28+00:00
Valid Until2027-08-05T16:31:28+00:00

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
33%
24
routing
13%
11
services
32%
23
ownership
30%
23
reputation
28%
13
geolocation
17%
11
Overall25%915
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-22 13:23:49 UTC
Last Seen2026-08-12 16:50:38 UTC
Profile Built2026-08-12 17:05:49 UTC
Data FreshnessLive
Signal Types24
Total Observations26
๐Ÿ” 24 signal types ยท 26 observations collected
This report is generated from 24+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.