178.105.172.178📋 Copy

IP Intelligence Briefing: 178.105.172.178

Date: 2026-06-10

---

**1. Core Profile**

• Risk Assessment:

- Overall Risk: Low (Score: 25)

- Provider Risk: 0 (Hetzner Online GmbH)

- Authority Risk: 0

- Stability: Unstable (flagged as route-stable: false)

• Ownership:

- ASN: AS24940

- Organization: Hetzner Online GmbH (cloud hosting provider)

- Geolocation: Nuremberg, Bavaria, Germany (51.17°N, 10.45°E)

• Network Role:

- Infrastructure: CloudCompute (AWS/GCP/other)

- Services: HTTP (80), HTTPS (443), SSH (22)

- Server Fingerprint: nginx/1.28.3 (Ubuntu)

---

**2. Threat Indicators**

• Malicious Activity:

- No malware indicators, phishing attempts, or exploit activity detected.

- Not listed in DNSBLs or threat feeds.

• SSL/TLS:

- Valid Let’s Encrypt certificate (subject: mhath.com).

- No self-signed or expired certificates.

• Compromise Risk:

- No evidence of data exfiltration, C2, or command-and-control traffic.

---

**3. Observation History (30-Day Trend)**

• Consistency: Stable over time (no abrupt changes in geolocation, DNS, or threat signals).
• Key Signals:

- Persistent cloud infrastructure (Hetzner) with no ASN changes.

- DNS resolution remains consistent (static.178.172.105.178.clients.your-server.de).

- No spikes in scanning activity or network anomalies.

---

**4. Network Relationships**

• DNS:

- Resolves to `static.178.172.105.178.clients.your-server.de` (hosted domain: `your-server.de`).

- SPF/DKIM records present (no email compromise risk).

• Network:

- Subnet: `178.105.172.178/24` (abuse density: 0, classified as "clean").

- Linked to network "CLOUD-NBG1" (Hetzner infrastructure).

---

**5. Neighborhood Analysis**

• Subnet: `178.105.172.178/24`

- Active IPs: 1 (itself)

- Threat Siblings: 0

- Abuse Density: 0% (clean subnet).

---

**6. Recommendations**

• Monitoring:

- Continue baseline monitoring for unexpected service changes (e.g., new ports, TLS certificate updates).

• Firewall:

- Allow standard HTTP/HTTPS/SSH traffic (ports 80, 443, 22).

- Block unused ports to minimize attack surface.

• Validation:

- Verify ownership via Hetzner’s RDAP for confirmation.

Conclusion: This IP is a legitimate cloud-hosted server with no current malicious activity. No immediate action required, but ongoing monitoring is advised.

---

*Generated by IPDebrief intelligence analysis.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.