88.99.226.113
IPDEBRIEF THREAT INTELLIGENCE BRIEFING
Target: 88.99.226.113/32
Classification: Low Risk / Legitimate Hosting Infrastructure
---
Infrastructure Profile
The IP address 88.99.226.113 operates within AS24940 (Hetzner Online GmbH) in Nuremberg, Germany (Bavaria region). The address is classified as hosting infrastructure with a risk score of 25. Forward DNS resolution confirmed to static.113.226.99.88.clients.your-server.de under the your-server.de domain. The IP has SPF and DMARC email authentication records. Control plane data indicates BGP prefix 88.99.0.0/16 with stable routing.
Threat Assessment
No active threat indicators detected. The IP is not classified as a Tor exit node, known attacker, or spam source. Blacklist count stands at 0. DNSBL listing present on 1 of 8 monitored lists. The IP shows no evidence of being part of known campaigns. No open ports or services detected on the target address.
Neighborhood Context
The /24 subnet (88.99.226.0.0/24) exhibits low abuse density (1). Classification shows "mostly_clean" status. One threat-related sibling IP exists within the neighborhood, but the target IP shows no inherited risk. No active sibling connections detected in the immediate neighborhood.
Historical Signal Analysis
Observation history reveals 20 total observations spanning from June 20 through June 28, 2026. Provider classification consistently identifies Hetzner across all observations. Confidence scores range from 0.17 to 0.85, indicating variable data sufficiency. No persistent malicious activity detected over the observation period. Ownership changes recorded at 0.
Relationship Graph
The IP maintains 39 documented relationships, primarily consisting of DNS associations to your-server.de hostnames and same-network relationships to HETZNER-nbg1-dc3 datacenter facilities.
Recommended Actions
Based on the risk profile, no immediate blocking or firewall rules are recommended. The IP demonstrates characteristics of legitimate hosting infrastructure with low risk indicators. Continue monitoring for changes in threat indicators or reputation scores. Standard logging and monitoring practices apply.
---
BRIEFING STATUS: COMPLETE
DATA SOURCES: IPDebrief Intelligence Platform
TIMESTAMP: Analysis generated from available data
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | — |
| CIDR Block | — |
| RIR | RIPE |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | static.113.226.99.88.clients.your-server.de |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | static.113.226.99.88.clients.your-server.de |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 20% | 2 | 3 |
| reputation | 27% | 1 | 3 |
| geolocation | 23% | 2 | 2 |
| Overall | 20% | 9 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-18 15:27:37 UTC |
| Last Seen | 2026-06-28 07:43:57 UTC |
| Profile Built | 2026-06-29 07:49:49 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 24 |
Full dossier details are available via our API.