178.105.92.139📋 Copy

# IP Intelligence Briefing: 178.105.92.139/32

## Executive Summary

IP 178.105.92.139 is classified as Low Risk (Score: 25) with no active threat indicators. The address belongs to Hetzner Online GmbH cloud infrastructure in Nuremberg, Germany, and demonstrates benign operational patterns consistent with single-service cloud hosting.

## Infrastructure Profile

## Threat Assessment

Risk Score: 25/100 (Low Risk)

Threat Indicators: None detected

• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Abuse Confidence Score: Not applicable

DNSBL Status: Listed on 1 of 8 total DNSBL lists (dnsblListedCount: 1)

## Network Behavior

• Open Ports: TCP/22 (SSH)
• DNS Resolution: static.139.92.105.178.clients.your-server.de (your-server.de)
• Forward Resolution: Confirmed
• Email Authentication: SPF and DMARC records present

## Neighborhood Analysis

Subnet: 178.105.92.0/24

• Abuse Density: 0.0 (Clean)
• Active Siblings: 1 (self)
• Threat Siblings: 0
• Classification: Clean

The IP operates in isolation within its /24 subnet with no neighboring abuse activity.

## Historical Observations

Total Observations: 20 signals

• Most Recent: 2026-06-15T11:16:42 UTC
• Threat Persistence: 0 days
• Ownership Changes: 0
• Persistent Malicious Activity: No

Geolocation Validation:

• Plausibility: Valid
• Distance from Claimed Location: 456.6 km
• Average RTT: 111.2 ms (107-115 ms range)
• Minimum Possible RTT: 9.13 ms

## Relationship Graph

Total Relationships: 38

• DNS Associations: 38 entries pointing to your-server.de hostnames
• Network Associations: CLOUD-NBG1 (Hetzner cloud network)

## Control Plane Data

• Route Stability: Unstable (isRouteStable: false)
• RPKI State: Not assessed
• IRR Consistency: Not assessed
• DNSSEC: Valid
• Operator Score: 0.3478 (Basic)

## Recommended Actions

No immediate security actions required. The IP demonstrates standard cloud infrastructure behavior with minimal risk exposure.

---

Analyst Notes: This IP represents legitimate cloud hosting infrastructure with no observable malicious activity. The presence of a single SSH port is expected for cloud management access. Continue standard monitoring; no firewall blocks or blocking recommendations necessary.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.