IP Intelligence Briefing: 178.105.235.195
Date: June 11, 2026
---
**1. Core Profile**
- Risk Score: 25 (Low Risk)
- Provider: Hetzner Online GmbH (ASN 24940)
- Geolocation: Germany (DE), Gunzenhausen, 51.17°N, 10.45°E
- Network Role: Cloud Compute Hosting (nginx/1.31.1, SSH, HTTP/HTTPS)
- Services:
- Open ports: 80 (HTTP), 443 (HTTPS), 22 (SSH)
- TLS Certificate: Issued to `git.groma.at` by Letβs Encrypt
- Server Banner: `nginx/1.31.1`
---
**2. Threat & Abuse Indicators**
- Threat Score: 0 (No malicious indicators detected)
- Blacklist Status: Not listed in DNSBLs
- Abuse Density: 1/10 (Low risk of subnet abuse)
- Malicious Activity: No observed campaigns, spam, or attacker patterns
---
**3. Observation History**
- Last 30 Days:
- Stable ownership (no IP reassignment)
- No persistent malicious behavior
- Normal DNS resolution (`static.195.235.105.178.clients.your-server.de`)
- No TLS/SSL anomalies or certificate warnings
---
**4. Network Relationships**
- DNS Associations:
- Linked to `your-server.de` (SPF/DKIM records present)
- No external domain hosting detected
- Network Subnet: `178.105.235.195/24`
- Subnet abuse density: 1/10 (mostly clean)
- No neighboring IPs detected (0 active siblings)
---
**5. Recommendations**
- Monitoring:
- Track DNS resolution patterns for `your-server.de` for potential misconfigurations.
- Monitor for unexpected port activity (e.g., 22/SSH) if not explicitly required.
- Security Actions:
- No immediate firewall rules or blocking required.
- Ensure cloud provider (Hetzner) adheres to security best practices for hosted instances.
---
Conclusion:
This IP is associated with a legitimate cloud-hosted server in Germany. No malicious activity or threats detected. Focus on maintaining configuration integrity and monitoring for unusual behavior.
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-NBG1 |
| CIDR Block | 178.105.224.0/20 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | static.195.235.105.178.clients.your-server.de |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | static.195.235.105.178.clients.your-server.de |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 3/3 domains |
| DMARC | 2/3 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 3 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.31.1 |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.2 |
π TLS Certificate
| SANs | git.groma.at |
| Valid From | 2026-05-28T07:52:02+00:00 |
| Valid Until | 2026-08-26T07:52:01+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 06F5BE0341F195FB5D046A91D93C9A3C86AB |
| Thumbprint | B6468CF7AC2A0BB6A48F2309BD4F52D1EE68D1AE |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 24% | 2 | 3 |
| Overall | 23% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-30 00:19:43 UTC |
| Last Seen | 2026-06-29 06:57:53 UTC |
| Profile Built | 2026-06-29 07:03:18 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.