# IP Intelligence Briefing: 116.203.194.188
## Executive Summary
IP 116.203.194.188 is assigned to Hetzner Online GmbH and classified as Moderate Risk (risk score: 40). The address belongs to the CLOUD-NBG1 network block (116.203.192.0/20) in Nuremberg, Germany. No active threat indicators were detected during analysis.
## Technical Profile
Ownership & Infrastructure:
- ASN: 24940 (Hetzner Online GmbH)
- Network: 116.203.192.0/20 (CLOUD-NBG1)
- RIR: APNIC
- Classification: Hosting infrastructure
Geolocation:
- Country: Germany (DE)
- Region: Bavaria
- City: Nuremberg
- Coordinates: 51.17°N, 10.45°E
Network State:
- Services: Firewalled / No Services (no open ports)
- DNS Resolution: static.188.194.203.116.clients.your-server.de
- Forward resolution confirmed
Security Posture:
- Threat Indicators: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0
- DNSBL Listed: 2 of 8 total lists
## Risk Assessment
Current Risk Level: Moderate (40/100)
Risk factors contributing to moderate classification:
- Listed on 2 DNSBL entries
- Hosting infrastructure classification
- Control plane shows route instability (isRouteStable: false)
Mitigating factors:
- No known attacker or spam indicators
- No active threat campaigns
- No observed malicious behavior
- Zero open ports on the address
## Observation History
Analysis of 16 observation records indicates temporal stability:
- No ownership changes detected
- Geolocation data remains consistent
- Threat observation count: 0
- Not persistently malicious
Most recent signal activity recorded 2026-08-13.
## Network Relationships
DNS Associations:
- static.188.194.203.116.clients.your-server.de (repeated associations)
Network Affiliations:
- CLOUD-NBG1 (same network block)
/24 Neighborhood Analysis:
- Neighboring IPs in subnet: 0
- Abuse density: 0
- High/medium/low risk neighbors: 0 each
## Recommended Actions
Based on the moderate risk classification and hosting infrastructure profile:
1. Monitoring: Continue passive observation; no immediate blocking recommended
2. Traffic Analysis: Monitor for outbound connections if this IP appears in threat logs
3. Threat Correlation: No current indicators for immediate escalation
4. Block Decision: No action required; IP shows no malicious indicators
## Conclusion
IP 116.203.194.188 is a legitimate hosting address from Hetzner infrastructure with moderate risk classification due to DNSBL listings. No active malicious activity has been observed. Standard monitoring procedures are appropriate.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-NBG1 |
| CIDR Block | 116.203.192.0/20 |
| RIR | APNIC |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.188.194.203.116.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.188.194.203.116.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Caddy |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 4 |
| geolocation | 27% | 2 | 3 |
| Overall | 28% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-09 10:50:37 UTC |
| Last Seen | 2026-08-30 23:43:37 UTC |
| Profile Built | 2026-08-30 23:48:36 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 32 |
Full dossier details are available via our API.