178.104.213.110📋 Copy

## IPDEBRIEF THREAT INTELLIGENCE BRIEFING

Target IP: 178.104.213.110/32

Analysis Date: Current

Classification: Low Risk Cloud Infrastructure Endpoint

---

Executive Summary

The target IP 178.104.213.110 is a legitimate Hetzner cloud hosting endpoint with an overall risk score of 25 (Low Risk). No active threat indicators were detected. The IP is part of a stable cloud infrastructure network with minimal abuse activity in the local subnet.

---

Infrastructure Profile

• Provider: Hetzner Online GmbH (ASN 24940)
• Infrastructure Type: CloudCompute / Single-Service Host
• Geolocation: Germany (DE), Camden region (51.17°N, 10.45°E)
• CIDR Block: 178.104.0.0/15
• Network Classification: Cloud hosting infrastructure (not bogon, not mobile, not residential)

DNS Resolution:

• PTR Hostname: static.110.213.104.178.clients.your-server.de
• Forward Resolution: Confirmed
• Hosted Domain: your-server.de

Active Services:

• Port 22/TCP (SSH): OpenSSH_10.2p1 Ubuntu-2ubuntu3.2
• No HTTP service detected
• No TLS certificate in use

---

Threat Assessment

• Risk Score: 25/100 (Low Risk)
• Abuse Confidence Score: Not applicable (null)
• Blacklist Status: 0 active blacklists
• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy Service: No

DNSBL Status: Listed on 1 of 8 total DNSBL feeds (requires contextual evaluation)

Campaign Correlation: No matches to known campaigns. Zero correlated IPs.

---

Historical Signal Analysis

• Total Observations: 21 signals collected
• Observation Period: Recent activity detected (June 2026 timeframe)
• Infrastructure Consistency: Consistent Hetzner cloud hosting classification across observations
• Threat Persistence: 0 days (no persistent malicious activity)
• Ownership Stability: No ownership changes detected

Signal Types Observed: Infrastructure classification, geolocation inference, operator scoring, and comprehensive profile assessments.

---

Network Neighborhood Analysis

• Subnet: 178.104.213.110/24
• Abuse Density: 1 (low)
• Classification: mostly_clean
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1

The local /24 subnet exhibits minimal abuse activity, supporting the conclusion that this IP operates within a generally clean cloud hosting environment.

---

Relationship Graph

• Total Relationships: 42
• Primary Associations: DNS hostname associations (static.110.213.104.178.clients.your-server.de)
• Network Association: CLOUD-FSN1
• Pattern: Single-hostname endpoint with consistent DNS associations

---

Recommended Actions

Current Risk Score: 25 (Low Risk)

Recommended Security Posture:

• No immediate blocking recommended
• Monitor for behavioral changes if traffic patterns indicate abuse
• Standard logging and monitoring advised for cloud infrastructure endpoints
• No specific firewall rules generated due to low risk profile

Contextual Considerations:

• DNSBL listing (1 of 8) should be evaluated against specific list policies
• SSH service exposed is standard for cloud hosting; verify against organizational baselines
• Hetzner is a reputable cloud provider with established security practices

---

Intelligence Conclusion

IP 178.104.213.110 represents standard cloud hosting infrastructure from Hetzner Online GmbH. The low risk score, absence of threat indicators, and clean neighborhood profile support classification as benign cloud infrastructure. No defensive action required unless organizational context or traffic analysis indicates otherwise.

Confidence Level: High (comprehensive multi-signal assessment)

Last Updated: Current analysis timestamp

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.