# IP Intelligence Briefing: 91.98.228.242/32
## Executive Summary
The IP address 91.98.228.242 is classified as Low Risk (Risk Score: 25) and operates within Hetzner Online GmbH's cloud infrastructure in Nuremberg, Germany. No active malicious indicators or threat campaign associations were identified. The IP is associated with legitimate hosting services under your-server.de.
## Profile Overview
Ownership & Infrastructure:
- Organization: Hetzner Online GmbH (Contact Role)
- ASN: 24940
- CIDR Block: 91.98.224.0/20
- Infrastructure Type: CloudCompute
- Classification: Cloud-hosted, not proxy/VPN/Tor infrastructure
- Registration: RIPE NCC
Geolocation:
- Country: Germany (DE)
- Region: Bavaria
- City: Nuremberg
- Coordinates: 51.17°N, 10.45°E
Network Role:
- Provider: Hetzner
- Service Purpose: Firewalled / No Services Detected
- No active open ports or services observed
- TLS/HTTP services: None detected
## DNS Intelligence
- Reverse DNS (PTR): static.242.228.98.91.clients.your-server.de
- Forward Resolution: your-server.de (confirmed)
- Email Authentication: SPF and DMARC records present
- CAA Records: Valid
- DNSSEC: Valid
## Threat Assessment
Current Indicators:
- Blacklist Count: 0 active entries
- Pulsedive Risk: None
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Control Plane Data:
- DNSBL Listed: 1 of 8 total lists (minor listing)
- Route Stability: Unstable (isRouteStable: false)
- BGP Prefix: 91.98.0.0/16
- Origin ASN: 24940
Abuse Confidence Score: Not applicable (insufficient signal)
## Historical Analysis
Observation Timeline:
- Total Observations: 16 signals
- Recent Activity: Signals observed 2026-08-06
- Threat Persistence: 0 days
- Ownership Changes: 0
Signal Types Detected:
- DNS association records
- Geolocation inference (Germany, 400km accuracy radius)
- DNSBL listing signals
- Network classification (clean subnet)
No evidence of escalating threat behavior or persistent malicious activity.
## Relationship Graph
Connected Entities (8 total):
- DNS Associations: static.242.228.98.91.clients.your-server.de (repeated associations)
- Network: CLOUD-NBG1 (repeated references)
Associated Domain: your-server.de (legitimate hosting domain)
## Neighborhood Analysis
Subnet: 91.98.228.242/24
- Abuse Density: 0 (clean)
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- High/Medium Risk Neighbors: 0
The /24 subnet shows no neighbor abuse activity, indicating this IP operates in isolation from known malicious infrastructure.
## Recommended Actions
Security Posture: No immediate blocking required.
Firewall Rules: None recommended based on current risk profile.
Monitoring: Standard logging and monitoring sufficient. No elevated threat indicators warrant special handling.
## Conclusion
IP 91.98.228.242 presents a low-risk profile consistent with legitimate cloud infrastructure operations. The IP is associated with Hetzner's CLOUD-NBG1 network and your-server.de hosting domain. No threat intelligence signals indicate malicious activity. The single DNSBL listing represents minor reputational noise rather than confirmed abuse. SOC analysts may treat this IP as benign with standard monitoring protocols.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-NBG1 |
| CIDR Block | 91.98.224.0/20 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.242.228.98.91.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.242.228.98.91.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.5 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-02 04:46:07 UTC |
| Last Seen | 2026-08-13 03:33:14 UTC |
| Profile Built | 2026-08-13 03:55:03 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.