# IP Intelligence Briefing: 167.233.140.109/32
Classification: LOW RISK | Date: August 2026 | Analyst: IPDebrief Intelligence
---
## Executive Summary
IP address 167.233.140.109 is a low-risk cloud hosting endpoint operated by Hetzner Online GmbH (ASN 24940). The IP exhibits standard web server behavior with no active threat indicators. No immediate blocking or mitigation actions required.
---
## Ownership & Infrastructure
- Provider: Hetzner Online GmbH
- Network: CLOUD-FSN1 (167.233.128.0/20)
- ASN: 24940 (Germany)
- Infrastructure Type: CloudCompute / Web Hosting
- Geolocation: Germany (51.17°N, 10.45°E), Europe/Berlin timezone
- Registration: ARIN RIR
---
## Service Exposure
| Port | Protocol | Service | Notes |
|---|---|---|---|
| 80 | TCP | HTTP | Standard web server |
| 443 | TCP | HTTPS | TLS-encrypted |
| 22 | TCP | SSH | OpenSSH 10.2p1 Ubuntu-2ubuntu3.2 |
Server Banner: nginx/1.28.3 (Ubuntu)
TLS Certificate:
- Issuer: C=DE, O=Eisexpeditionen Local, CN=staging.eisexpeditionen.de
- Subject: staging.eisexpeditionen.de, localhost
- Status: Valid self-signed certificate
- Note: Certificate indicates staging environment usage
---
## DNS Resolution
- PTR Hostname: static.109.140.233.167.clients.your-server.de
- Forward Resolution: Confirmed
- Domain: your-server.de
- DNSSEC: Valid
- CAA Records: Present
---
## Threat Assessment
| Metric | Value | Status |
|---|---|---|
| Risk Score | 25 (Low) | Acceptable |
| Abuse Confidence | Not Applicable | N/A |
| Blacklist Count | 0 | Clean |
| Is Tor Exit | No | Standard |
| Is Known Attacker | No | Clean |
| Is Spam Source | No | Clean |
| DNSBL Lists | 1 of 8 | Minor listing |
Threat Indicators: None detected. No known campaigns correlated.
---
## Control Plane & Routing
- Operator Score: 0.3478 (Basic)
- Route Stability: Not stable (0 route changes in 30d)
- DNSSEC: Valid
- RPKI: Not verified
- IRR Consistency: Not verified
---
## Network Neighborhood Analysis
Subnet: 167.233.140.109/24
- Abuse Density: 0 (Low)
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 0
Neighbor Profile: 167.233.140.61 (Risk Score: 25, Authority Score: 60)
---
## Historical Observations
- Total Observations: 23 signals
- Observation Period: Recent activity from August 2026
- Ownership Changes: 0 (Stable)
- Threat Persistence: None detected
- Status: Not persistently malicious
- Geolocation Validation: Plausible (235 km from reference point, 116-128ms RTT)
---
## Relationships
- DNS Associations: static.109.140.233.167.clients.your-server.de (multiple records)
- Network Relationships: CLOUD-FSN1 subnet (Hetzner cloud infrastructure)
- No external entity relationships detected
---
## Security Recommendations
Status: No immediate action required.
The IP exhibits characteristics of legitimate cloud hosting infrastructure:
- Low risk score (25)
- No threat indicators or campaign correlations
- Stable ownership and geolocation
- Standard web server services
SOC Analyst Notes:
- No firewall rules or blocking recommendations generated
- Certificate indicates staging environment (staging.eisexpeditionen.de)
- Consider allowing traffic unless organization-specific policy restricts Hetzner cloud IPs
- Monitor for any future changes in risk profile or service exposure
---
Report Generated: IPDebrief Intelligence Platform
Data Source: Live threat intelligence feeds and network reconnaissance
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-FSN1 |
| CIDR Block | 167.233.128.0/20 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.109.140.233.167.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.109.140.233.167.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 2 domains |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.28.3 (Ubuntu) |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.2 |
๐ TLS Certificate
| SANs | staging.eisexpeditionen.delocalhost |
| Valid From | 2026-07-29T11:30:07+00:00 |
| Valid Until | 2028-10-31T11:30:07+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 825 days |
| Serial Number | 170B0EE86E05C5835CF544185A467972E8E1C06A |
| Thumbprint | B7525D99A4D09845273C0A77C595C3D3F6DE6B1E |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 45% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 21% | 1 | 2 |
| geolocation | 30% | 2 | 3 |
| Overall | 27% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-24 20:33:45 UTC |
| Last Seen | 2026-08-12 18:54:33 UTC |
| Profile Built | 2026-08-12 19:04:50 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.