IP INTELLIGENCE BRIEFING: 91.107.158.47/32
Classification: LOW RISK / BENIGN
Generated: 2026-08-06
Analyst: IPDebrief Intelligence
---
EXECUTIVE SUMMARY
Target IP 91.107.158.47 is a cloud infrastructure endpoint operated by Hetzner Online GmbH. The address exhibits no malicious indicators, maintains a low-risk reputation profile, and demonstrates consistent benign network behavior across all observed signals.
---
OWNERSHIP & INFRASTRUCTURE
| Attribute | Value |
|---|---|
| **Organization** | Hetzner Online GmbH |
| **ASN** | AS24940 |
| **Network** | CLOUD-NBG1 (91.107.144.0/20) |
| **Infrastructure Type** | CloudCompute |
| **Geolocation** | Nuremberg, Bavaria, DE |
| **CIDR Block** | 91.107.158.47/32 |
The IP is properly registered with RIPE NCC and operates within Hetzner's cloud hosting infrastructure. The network demonstrates stable ownership with no recorded changes in the observation period.
---
THREAT INDICATORS
| Indicator | Status |
|---|---|
| **Risk Score** | 0 (Low Risk) |
| **Abuse Confidence Score** | None |
| **Blacklist Count** | 0 |
| **Known Campaigns** | None |
| **Threat Feeds** | None |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
No threat indicators detected across all monitored feeds. The IP does not appear on any known blacklist or threat intelligence sources.
---
NETWORK CLASSIFICATION
| Attribute | Status |
|---|---|
| **Is Cloud** | Yes |
| **Is CDN** | No |
| **Is VPN** | No |
| **Is Proxy** | No |
| **Is Hosting** | Yes |
| **Is Mobile** | No |
| **Is Residential** | No |
| **Open Ports** | None (Firewalled) |
The endpoint operates as a cloud hosting service with no exposed services. The network role is classified as "Firewalled / No Services," indicating defensive security posture.
---
DNS & EMAIL CONFIGURATION
- PTR Hostname: static.47.158.107.91.clients.your-server.de
- Forward Resolution: Confirmed (1 record)
- Email Authentication: SPF and DMARC records present
- Domain: your-server.de
DNS configuration is properly configured with forward and reverse resolution consistency. Email authentication records (SPF/DMARC) indicate legitimate mail server operations.
---
OBSERVATION HISTORY
Total Observations: 14
Recent observations (2026-08-06) confirm:
- Consistent cloud infrastructure classification
- No infrastructure type changes
- No ownership changes detected
- Operator score: 0.3478 (Basic)
- No persistent malicious behavior observed
- No threat persistence days recorded
Historical analysis shows stable, benign behavior with no degradation in network reputation.
---
RELATIONSHIP ANALYSIS
Connected Entities (2):
1. Same Network: CLOUD-NBG1 (Hetzner network)
2. DNS Association: static.47.158.107.91.clients.your-server.de
Relationship graph confirms the IP's association with Hetzner's cloud network and its hosted domain configuration.
---
NEIGHBORHOOD ANALYSIS
Subnet: 91.107.158.47/24
- Neighbor Count: 0
- Abuse Density: 0
- High Risk Neighbors: 0
- Medium Risk Neighbors: 0
- Low Risk Neighbors: 0
The /24 subnet demonstrates zero abuse activity and no neighboring threat indicators.
---
CONTROL PLANE DATA
- BGP Prefix: 91.107.128.0/17
- Route Stability: False
- DNSSEC Valid: True
- CAA Records: Present
- DNSBL Listed: 0 of 8 lists
- Operator Score: 0.3478 (Basic)
---
ACTIONABLE INTELLIGENCE
SOC Analyst Recommendations:
1. ALLOW TRAFFIC: No blocking required. The IP demonstrates benign characteristics.
2. MONITORING: Standard monitoring recommended for cloud infrastructure.
3. FIREWALL RULES: No deny rules necessary. Current network policies remain appropriate.
4. THREAT HUNT: No correlation to active campaigns or APT indicators.
Risk Assessment: This IP represents legitimate cloud hosting infrastructure with no evidence of malicious activity. Classification as LOW RISK with no immediate defensive actions required.
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-NBG1 |
| CIDR Block | 91.107.144.0/20 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.47.158.107.91.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.47.158.107.91.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_8.7 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 22% | 9 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-31 05:28:53 UTC |
| Last Seen | 2026-08-13 01:29:33 UTC |
| Profile Built | 2026-08-13 01:45:00 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.