IP Intelligence Briefing: 91.99.103.25
Date: 2026-06-12
**Overview**
- Risk Score: 25 (Low Risk)
- Provider: Hetzner Online GmbH (ASN 24940)
- Geolocation: Nuremberg, Bavaria, Germany (51.17°N, 10.45°E)
- Network Role: CloudCompute infrastructure (Hosting)
- Threat Status: No malicious indicators, no blacklist entries, no campaign associations.
**Key Findings**
1. Ownership & Provider
- Registered under Hetzner Online GmbH (RIPE), a reputable cloud provider.
- Subnet: 91.99.96.0/20 (abuse density: 0%).
- No ownership changes detected in the last 30 days.
2. Network & DNS
- DNS PTR record: `static.25.103.99.91.clients.your-server.de` (owned by "your-server.de").
- SPF and DMARC records present, indicating email security measures.
- No open ports or TLS certificates detected.
3. Threat Indicators
- No malicious activity, spam, or known attacker associations.
- DNSBL listings: 1 out of 8 monitored lists (low priority).
- BGP route stability: Stable (no recent route changes).
4. Observation History
- Last 30 days: Minimal signal activity (Basic network signals, no threat persistence).
- No spikes in risk scores or suspicious DNS behavior.
5. Neighborhood Analysis
- Subnet 91.99.103.25/24 has 0 abuse density and no malicious neighbors.
- All sibling IPs are inactive or clean.
**Recommendations**
- Monitor: Track for unexpected DNS changes or port openings.
- Firewall: No immediate blocking required; allow traffic as per normal operations.
- Context: This IP is part of a legitimate cloud hosting environment with no current security risks.
Conclusion: 91.99.103.25 is a low-risk, legitimate cloud server managed by Hetzner Online GmbH. No action is required at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-NBG1 |
| CIDR Block | 91.99.96.0/20 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.25.103.99.91.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.25.103.99.91.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 9 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-30 11:00:01 UTC |
| Last Seen | 2026-06-29 07:49:54 UTC |
| Profile Built | 2026-06-29 07:54:28 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.