194.135.105.208
INTELLIGENCE BRIEFING: 194.135.105.208/32
Classification: Low Risk | Risk Score: 25/100
Infrastructure Profile
- Organization: TW-Cloud (Abuse-C Role)
- ASN: 210976 (TWC-EU - Timeweb, LLP, KZ)
- Network Range: 194.135.105.0/24 (RIPE Registry, allocated 1995-02-06)
- Geolocation: Netherlands (52.13°N, 5.29°E, Europe/Amsterdam timezone)
- Status: Firewalled / No Services Detected
Threat Assessment
- Reputation: Low Risk
- Blacklist Presence: 1 listing out of 8 DNSBL checks (1 DNSBL listing)
- Tor/Proxy: Not a Tor exit node, not a known proxy
- Known Attacker: No
- Spam Source: No
- Campaign Activity: No known campaigns, no certificate matches
Network Behavior
- Services: No open ports detected
- DNS: No PTR records, no forward resolution
- Email Reputation: Not evaluated (no hosted domains)
- Behavioral Indicators: No honeypot hits, no enumeration strikes, no WAF violations
Subnet Context
- Abuse Density: 0
- Neighbor Analysis: 1 sibling IP (194.135.105.161) with matching risk score 25
- Network Classification: Infrastructure hosting environment
Observation History
- Total Observations: 10
- Recent Signals: DNSSEC validation confirmed; ASN resolution to Timeweb, LLP (CZ); one blacklist listing with high severity detected
- Persistence: No persistent malicious activity observed (0 threat persistence days)
Recommended Actions
- Firewall: No blocking recommended at this time (Low Risk classification)
- Monitoring: Continue monitoring for service emergence or behavior change
- Threat Intel: No immediate threat indicators require escalation
Summary
194.135.105.208 is a firewalled infrastructure IP within the TW-Cloud network. Current risk profile indicates low threat activity with no active malicious behavior. One blacklist listing detected but does not indicate active abuse. Network shows minimal abuse density. SOC analysts may monitor for service emergence or behavioral changes but no immediate defensive action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Abuse-C Role |
| ASN | AS210976 |
| Network Name | TW-Cloud |
| CIDR Block | 194.135.105.0/24 |
| RIR | RIPE |
| Country | NL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | granistore.online |
| Valid From | 2026-07-15T19:21:36+00:00 |
| Valid Until | 2026-10-13T19:21:35+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
🛡️ Public Network Snapshot
| Origin ASN | AS210976 |
| Network Prefix | 194.135.105.0/24 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 17% | 2 | 3 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 15% | 2 | 2 |
| Overall | 15% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-16 22:52:03 UTC |
| Last Seen | 2026-09-29 03:07:18 UTC |
| Profile Built | 2026-09-20 18:31:21 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 194.135.105.208
Who owns the IP address 194.135.105.208?
194.135.105.208 is registered to Abuse-C Role. The address falls within the 194.135.105.0/24 network block. Registration is held at RIPE.
Where is 194.135.105.208 located?
Geolocation data places 194.135.105.208 in Netherlands. The local time zone is Europe/Amsterdam. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 194.135.105.208 malicious or safe?
194.135.105.208 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 194.135.105.208?
Responsive ports observed on 194.135.105.208 include 80, 443, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.