IPDebrief

178.104.223.93

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP Intelligence Briefing: 178.104.223.93/32

Classification: Low Risk Cloud Compute Infrastructure | Risk Score: 25

---

Ownership & Geolocation

The IP address 178.104.223.93 is assigned to Hetzner Online GmbH (ASN 24940), a German cloud hosting provider. The address is registered within the RIPE NCC region and operates as cloud compute infrastructure. Geolocation data indicates Germany (DE), with coordinates centered on Camden, though geo-validation flags show some inconsistencies (geoPlausible: false).

Network Role & Services

DNS & Fingerprinting

Forward DNS resolution confirms the IP resolves to hostname static.93.223.104.178.clients.your-server.de under domain your-server.de. PTR records align with forward resolution. DNSSEC is valid, and CAA records are present. Email authentication includes SPF and DMARC records.

Threat Indicators

Observation History

Analysis of 24 historical observations (most recent: 2026-06-20) indicates stable infrastructure characteristics. TLS certificate and HTTP fingerprinting signals show consistent nginx deployment with OpenSSH 9.6p1 on the SSH service. No persistent malicious activity detected. Threat observation count remains at 1, with no evidence of escalating risk over time.

Network Relationships

Forty-three relationships were identified, primarily DNS associations to static.93.223.104.178.clients.your-server.de and network associations to CLOUD-FSN1. No suspicious correlated entities detected.

Neighborhood Analysis

The /24 subnet 178.104.223.0/24 shows abuse density of 0 with classification "mostly_clean." Only 1 active sibling IP exists in the neighborhood. Inherited risk score is 2.

---

Recommended Actions

Risk score of 25 (Low) with no actionable security recommendations generated. No firewall rules required. The IP represents legitimate cloud hosting infrastructure with normal web server services. Monitoring is optional; no immediate blocking or allowlisting required.

Intelligence Summary: This IP address belongs to Hetzner's cloud infrastructure and hosts a standard web server configuration for analytics.icoffio.com. No malicious indicators or threat activity were detected. The IP maintains a low risk profile with no blacklist presence and stable historical signals.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
RegionENG
CityCamden
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

๐Ÿข Ownership & Registration

OrganizationHetzner Online GmbH - Contact Role
ASNAS24940
Network Nameโ€”
CIDR Blockโ€”
RIRRIPE
Countryโ€”
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRstatic.93.223.104.178.clients.your-server.de
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesstatic.93.223.104.178.clients.your-server.de

๐Ÿ” DNS Hygiene

Hygiene Score100% (Excellent)
SPF2/2 domains
DMARC2/2 domains
FCrDNSVerified
DNSSECValid
CAAPresent
Domains Checked2 domains

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting โ€” Infrastructure provider without advanced routing
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Servernginx
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16

๐Ÿ” TLS Certificate

๐Ÿ”’
CN=analytics.icoffio.com
Issued by CN=YE1, O=Let's Encrypt, C=US
Self-signed: No
SANsanalytics.icoffio.com
Valid From2026-06-01T23:09:01+00:00
Valid Until2026-08-30T23:09:00+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha384ECDSA
Validity Period89 days
Serial Number0558EBB10F3B7D6C5DC793986D317829C97E
Thumbprint6679830DCCB8E4A81CCA6A0413ECEBA0215BA9FD

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
27%
24
routing
13%
11
services
24%
23
ownership
24%
23
reputation
26%
13
geolocation
33%
23
Overall24%1017
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-22 03:08:52 UTC
Last Seen2026-06-28 17:15:01 UTC
Profile Built2026-06-29 05:17:48 UTC
Data FreshnessLive
Signal Types23
Total Observations27
๐Ÿ” 23 signal types ยท 27 observations collected
This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.