46.225.223.141📋 Copy

INTELLIGENCE BRIEFING: 46.225.223.141

Classification: Low Risk / Cloud Infrastructure Asset

Analysis Date: Current

Risk Score: 25/100

---

OWNERSHIP & INFRASTRUCTURE

IP 46.225.223.141 is assigned to AS24940 (Hetzner Online GmbH), operating within the CLOUD-NBG1 subnet (46.225.208.0/20). The asset is provisioned as cloud compute infrastructure in Nuremberg, Bavaria, Germany (coordinates: 51.17°N, 10.45°E). The IP resolves via DNS to your-server.de with associated PTR hostname static.141.223.225.46.clients.your-server.de. Email authentication records (SPF, DMARC) are configured.

---

NETWORK SERVICES

Active services include HTTP (port 80) and HTTPS (port 443). TLS certificate issued by TRAEFIK DEFAULT CERT (not self-signed). HTTP/2 protocol supported. Server returns 503 (Service Unavailable) status code.

---

THREAT INDICATORS

• Blacklist count: 0
• Known campaigns: None
• Tor exit node: No
• Known attacker: No
• Spam source: No
• Abuse confidence score: Not available

Anomaly Detection:

Control plane analysis indicates the BGP route (46.224.0.0/15) is unstable. DNSBL listing count: 1 of 8 total lists.

---

OBSERVATION HISTORY (23 signals)

Historical data reveals geolocation signal inconsistencies:

• 2026-06-21: Country DE (confidence: 0.52)
• 2026-06-16: Country IR detected via Alienvault OTX (confidence: 0.85) with threat pulse associations

One historical observation (2026-06-16) flagged the IP with threat indicators from Alienvault OTX (7 pulse names), though current profile shows no active threat indicators. The IP is not classified as persistently malicious.

---

NEIGHBORHOOD ANALYSIS (46.225.223.0/24)

Subnet abuse density: 0

Classification: Clean

Total siblings: 1

Active siblings: 1

Threat siblings: 0

---

NETWORK RELATIONSHIPS

21 relationships identified:

• Multiple Same Network associations to CLOUD-NBG1 subnet
• DNS associations to your-server.de infrastructure

---

RECOMMENDED ACTIONS

No specific firewall rules or remediation actions generated. The IP presents as a standard cloud hosting asset with historical but not currently active threat indicators.

INTEL NOTE: While the IP currently registers as low-risk (25/100) with no active threat indicators, the historical detection of Iranian geolocation signals and Alienvault OTX threat associations warrants continued monitoring. The route instability and DNSBL listing suggest potential infrastructure volatility. Recommend inclusion in monitoring queues for anomaly detection on traffic patterns from this subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.