IPDebrief

167.233.140.109

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 167.233.140.109/32

Classification: LOW RISK | Date: August 2026 | Analyst: IPDebrief Intelligence

---

## Executive Summary

IP address 167.233.140.109 is a low-risk cloud hosting endpoint operated by Hetzner Online GmbH (ASN 24940). The IP exhibits standard web server behavior with no active threat indicators. No immediate blocking or mitigation actions required.

---

## Ownership & Infrastructure

---

## Service Exposure

PortProtocolServiceNotes
80TCPHTTPStandard web server
443TCPHTTPSTLS-encrypted
22TCPSSHOpenSSH 10.2p1 Ubuntu-2ubuntu3.2

Server Banner: nginx/1.28.3 (Ubuntu)

TLS Certificate:

---

## DNS Resolution

---

## Threat Assessment

MetricValueStatus
Risk Score25 (Low)Acceptable
Abuse ConfidenceNot ApplicableN/A
Blacklist Count0Clean
Is Tor ExitNoStandard
Is Known AttackerNoClean
Is Spam SourceNoClean
DNSBL Lists1 of 8Minor listing

Threat Indicators: None detected. No known campaigns correlated.

---

## Control Plane & Routing

---

## Network Neighborhood Analysis

Subnet: 167.233.140.109/24

Neighbor Profile: 167.233.140.61 (Risk Score: 25, Authority Score: 60)

---

## Historical Observations

---

## Relationships

---

## Security Recommendations

Status: No immediate action required.

The IP exhibits characteristics of legitimate cloud hosting infrastructure:

SOC Analyst Notes:

---

Report Generated: IPDebrief Intelligence Platform

Data Source: Live threat intelligence feeds and network reconnaissance

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
Regionโ€”
CityBerlin
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

๐Ÿข Ownership & Registration

OrganizationHetzner Online GmbH - Contact Role
ASNAS24940
Network NameCLOUD-FSN1
CIDR Block167.233.128.0/20
RIRARIN
CountryDE
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRstatic.109.140.233.167.clients.your-server.de
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesstatic.109.140.233.167.clients.your-server.de

๐Ÿ” DNS Hygiene

Hygiene Score100% (Excellent)
SPF2/2 domains
DMARC2/2 domains
FCrDNSVerified
DNSSECValid
CAAPresent
Domains Checked2 domains

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierTier 3 โ€” Basic operator with some routing infrastructure
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Servernginx/1.28.3 (Ubuntu)
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.2

๐Ÿ” TLS Certificate

A self-signed certificate was detected. This is common for development servers, internal services, or IoT devices.
โš ๏ธ
C=DE, O=Eisexpeditionen Local, CN=staging.eisexpeditionen.de
Issued by C=DE, O=Eisexpeditionen Local, CN=staging.eisexpeditionen.de
Self-signed: Yes
SANsstaging.eisexpeditionen.delocalhost
Valid From2026-07-29T11:30:07+00:00
Valid Until2028-10-31T11:30:07+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period825 days
Serial Number170B0EE86E05C5835CF544185A467972E8E1C06A
ThumbprintB7525D99A4D09845273C0A77C595C3D3F6DE6B1E

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
45%
23
routing
13%
11
services
30%
23
ownership
27%
23
reputation
21%
12
geolocation
30%
23
Overall27%1015
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-24 20:33:45 UTC
Last Seen2026-08-12 18:54:33 UTC
Profile Built2026-08-12 19:04:50 UTC
Data FreshnessLive
Signal Types24
Total Observations26
๐Ÿ” 24 signal types ยท 26 observations collected
This report is generated from 24+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.