91.107.159.38📋 Copy

IP Intelligence Briefing: 91.107.159.38

Date: 2026-06-16

---

**1. Core Profile**

• Risk Score: Moderate (40/100)
• Provider: Hetzner Online GmbH (cloud hosting)
• Geolocation: Germany (Bavaria, Berlin)
• Network Role: Cloud compute infrastructure (firewalled, no open services)
• Ownership: Unverified ASN/org; registered with RIPE NCC.

---

**2. Threat Indicators**

• DNSBL Listings: Identified in 2/8 DNS-based blackhole lists (high-severity risk).
• Threat Feeds: No direct malicious activity detected (no malware, C2, or phishing indicators).
• Historical Observations:

- Stable registration with Hetzner since at least June 2026.

- DNS records validated (PTR hostname: `static.38.159.107.91.clients.your-server.de`).

- Email authentication (SPF/DKIM) detected for `your-server.de`.

---

**3. Network Relationships**

• DNS Associations: Linked to `your-server.de` (hosted domain).
• BGP Context: Part of Hetzner’s `/17` prefix (`91.107.128.0/17`), routed via ASN 24940.
• Subnet: Isolated `/32` IP; no neighboring IPs reported.

---

**4. Behavioral Insights**

• Traffic Patterns: No open ports or TLS services detected.
• DNSSEC: Validated (DNSSEC-enabled).
• Route Stability: BGP route instability detected (fluctuations in route changes).

---

**5. Recommendations**

• Monitor: Track DNSBL listings and check `your-server.de` for suspicious activity.
• Firewall: Consider blocking outbound traffic to this IP if not explicitly needed.
• Investigate: Verify ownership details with Hetzner and assess the legitimacy of `your-server.de`.
• Contextualize: Compare against known Hetzner infrastructure to confirm benign intent.

---

Note: No immediate active threats detected, but the IP’s DNSBL associations and BGP instability warrant further scrutiny.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.