178.105.4.138📋 Copy

IP Intelligence Briefing: 178.105.4.138

Date: 2026-06-01

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Hetzner Online GmbH (ASN 24940, Germany)
• Geolocation: Falkenstein, Saxony, Germany (51.17°N, 10.45°E)
• Network Role: CloudCompute host (Hetzner infrastructure)
• Services: Open RDP port (3389/tcp)
• Threat Indicators: No malicious activity detected (zero threat feeds, blacklists, or campaigns)

---

**2. Observation History**

• Recent Activity (Last 30 Days):

- Consistently low-risk signals with no persistent malicious patterns.

- Geolocation inferred with 0.52 confidence (moderate accuracy).

- Network stability flagged as unstable, but no ongoing threats observed.

• Key Metrics:

- 18 total observations (last 30 days).

- Operator score: 0.3478 (Basic risk label).

---

**3. Relationships & Dependencies**

• DNS Associations:

- Linked to `static.138.4.105.178.clients.your-server.de` (PTR record).

- Hostname `your-server.de` has SPF and DMARC records (no email-based threats).

• Network Affiliation:

- Part of Hetzner’s `CLOUD-FSN1` subnet (likely cloud infrastructure).

- No direct ties to known malicious networks or campaigns.

---

**4. Subnet Neighbors**

• Subnet: 178.105.4.138/24
• Neighbor Risk:

- 178.105.4.71 (risk score: 60, authority score: 60) – higher authority but no malicious indicators.

• Abuse Density: 0.0 (subnet is "mostly clean").

---

**5. Actionable Insights**

• RDP Port (3389):

- Open RDP access requires validation of legitimate users and strong authentication.

- Monitor for brute-force attempts or unauthorized access.

• DNS Configuration:

- Verify `your-server.de` DNS records for misconfigurations or unintended exposure.

• Network Stability:

- Hetzner’s cloud infrastructure appears stable, but monitor for unexpected changes.

• Neighbor IP (178.105.4.71):

- Track for potential correlation with future threats, though current risk is low.

---

Conclusion:

178.105.4.138 is a low-risk, legitimately registered cloud host with no current malicious indicators. The open RDP port and DNS configuration warrant closer inspection for security best practices, but no immediate threat to the network. Monitor the subnet for changes in risk posture.

Recommended Next Steps:

• Validate RDP access controls and user permissions.
• Ensure DNS records are correctly configured and secured.
• Continuously monitor the subnet for emerging risks.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.