## IP Intelligence Briefing: 178.104.223.93/32
Classification: Low Risk Cloud Compute Infrastructure | Risk Score: 25
---
Ownership & Geolocation
The IP address 178.104.223.93 is assigned to Hetzner Online GmbH (ASN 24940), a German cloud hosting provider. The address is registered within the RIPE NCC region and operates as cloud compute infrastructure. Geolocation data indicates Germany (DE), with coordinates centered on Camden, though geo-validation flags show some inconsistencies (geoPlausible: false).
Network Role & Services
- Infrastructure Type: Cloud Compute (Hosting)
- Network Classification: Cloud environment, not CDN, VPN, or proxy
- Open Ports: 80/TCP (HTTP), 443/TCP (HTTPS), 22/TCP (SSH)
- Server Banner: nginx
- HTTP Status Code: 500 (Error response)
- TLS Certificate: Issued by Let's Encrypt for domain analytics.icoffio.com, using TLS 1.3 with cipher suite TLS_AES_256_GCM_SHA384
DNS & Fingerprinting
Forward DNS resolution confirms the IP resolves to hostname static.93.223.104.178.clients.your-server.de under domain your-server.de. PTR records align with forward resolution. DNSSEC is valid, and CAA records are present. Email authentication includes SPF and DMARC records.
Threat Indicators
- Blacklist Count: 0
- Known Attacker: False
- Tor Exit Node: False
- Spam Source: False
- Abuse Confidence Score: Not available
- DNSBL Listings: 1 of 8 total lists
- Campaign Correlation: None detected
Observation History
Analysis of 24 historical observations (most recent: 2026-06-20) indicates stable infrastructure characteristics. TLS certificate and HTTP fingerprinting signals show consistent nginx deployment with OpenSSH 9.6p1 on the SSH service. No persistent malicious activity detected. Threat observation count remains at 1, with no evidence of escalating risk over time.
Network Relationships
Forty-three relationships were identified, primarily DNS associations to static.93.223.104.178.clients.your-server.de and network associations to CLOUD-FSN1. No suspicious correlated entities detected.
Neighborhood Analysis
The /24 subnet 178.104.223.0/24 shows abuse density of 0 with classification "mostly_clean." Only 1 active sibling IP exists in the neighborhood. Inherited risk score is 2.
---
Recommended Actions
Risk score of 25 (Low) with no actionable security recommendations generated. No firewall rules required. The IP represents legitimate cloud hosting infrastructure with normal web server services. Monitoring is optional; no immediate blocking or allowlisting required.
Intelligence Summary: This IP address belongs to Hetzner's cloud infrastructure and hosts a standard web server configuration for analytics.icoffio.com. No malicious indicators or threat activity were detected. The IP maintains a low risk profile with no blacklist presence and stable historical signals.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | RIPE |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.93.223.104.178.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.93.223.104.178.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 2 domains |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
๐ TLS Certificate
| SANs | analytics.icoffio.com |
| Valid From | 2026-06-01T23:09:01+00:00 |
| Valid Until | 2026-08-30T23:09:00+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 0558EBB10F3B7D6C5DC793986D317829C97E |
| Thumbprint | 6679830DCCB8E4A81CCA6A0413ECEBA0215BA9FD |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 24% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 24% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-22 03:08:52 UTC |
| Last Seen | 2026-06-28 17:15:01 UTC |
| Profile Built | 2026-06-29 05:17:48 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 27 |
Full dossier details are available via our API.