178.105.81.235📋 Copy

# IP INTELLIGENCE BRIEFING

Target IP: 178.105.81.235/32

Date: Current

Classification: Low Risk / Cloud Infrastructure

## EXECUTIVE SUMMARY

IP address 178.105.81.235 is a cloud infrastructure endpoint operated by Hetzner Online GmbH (ASN 24940). The IP maintains a low-risk profile with no active threat indicators. Historical analysis reveals sporadic blacklist activity, though current risk scoring remains neutral. The address resolves to a firewalled cloud compute environment with no exposed services.

## TECHNICAL PROFILE

Network Classification: Cloud Compute Infrastructure

Provider: Hetzner Online GmbH (ASN 24940, RIPE RIR)

Geolocation: Germany (DE) — Sittingbourne region

BGP Prefix: 178.104.0.0/15

Route Stability: Unstable (0 route changes in 30-day window)

DNS Configuration:

• PTR Record: static.235.81.105.178.clients.your-server.de
• Forward Resolution: Confirmed
• SPF/DMARC: Configured on parent domain (your-server.de)
• Domain Classification: your-server.de

Network State:

• Open Ports: None detected
• TLS Certificates: None
• Service Status: Firewalled / No Services
• Anycast: False

## THREAT INDICATORS

Current Risk Score: 0 (Low Risk)

Abuse Confidence Score: Not applicable

Blacklist Status: 0/8 DNSBL lists

Tor Exit Node: False

Known Attacker: False

Spam Source: False

Threat Persistence: 0 days

Campaign Likelihood: Not applicable

Observed Threat Signals (Historical):

• June 2026: 8 total blacklist listings with 1 active listing (severity: high)
• Port scanning activity recorded in historical observations
• DNS and geolocation signals present across 22 historical observations

## NETWORK NEIGHBORHOOD ANALYSIS

Subnet: 178.105.81.0/24

Abuse Density: 0%

Subnet Classification: Clean

Risk Distribution:

• High Risk IPs: 0
• Medium Risk IPs: 0
• Low Risk IPs: 0

Total Siblings: 1

Threat Siblings: 0

The /24 neighborhood shows no correlated malicious activity, indicating isolated endpoint behavior.

## ENTITY RELATIONSHIPS

DNS Associations: static.235.81.105.178.clients.your-server.de (recurring association)

Network Associations: CLOUD-NBG1 (cloud network segment)

Total Relationships: 29 (predominantly DNS and network-level associations)

All relationship entities cluster around the same cloud network segment, suggesting single-tenant infrastructure deployment.

## OBSERVATION HISTORY

Total Observations: 22

Time Range: Historical data through June 2026

Signal Evolution:

• Recent observations (June 2026): DNS resolution, CAA records, and blacklist listings recorded
• Mid-period (June 15, 2026): Port scanning activity, network classification signals
• Ownership changes: 0 events
• Persistently malicious: False

The IP exhibits normal signal variation typical of cloud hosting infrastructure with periodic scanning and blacklist listing activity. No sustained malicious behavior patterns detected.

## RECOMMENDED ACTIONS

Firewall Classification: Monitor / No Immediate Action Required

Recommended Actions: None specified based on current risk profile

The IP presents low risk to defensive operations. Standard monitoring protocols apply. No blocking or mitigation actions recommended at this time.

## INTELLIGENCE JUDGMENT

IP 178.105.81.235 operates as a standard Hetzner cloud compute instance with proper DNS and email authentication configuration. Historical signals indicate transient blacklist activity but current profiling shows no active threat indicators. The clean neighborhood classification and absence of exposed services support classification as legitimate cloud infrastructure. SOC analysts should maintain awareness of the historical blacklist activity but no immediate threat response required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.