204.168.170.128📋 Copy

## IP INTELLIGENCE BRIEFING: 204.168.170.128/32

Classification: Low Risk | Risk Score: 25/100 | Last Updated: 2026-06-29

OWNERSHIP & NETWORK ATTRIBUTES

The IP address 204.168.170.128 is hosted within the Hetzner Online GmbH infrastructure under AS24940 (CLOUD-HEL1 network). The CIDR block 204.168.160.0/20 was registered to Hetzner and operates as a cloud compute provider. Geolocation data places the infrastructure in Gunzenhausen, Germany (latitude/longitude unavailable), with DNS resolution pointing to the your-server.de domain.

INFRASTRUCTURE CLASSIFICATION

The endpoint operates as a cloud-hosted infrastructure with no open ports detected during scanning. Network classification indicates:

• Infrastructure Type: CloudCompute
• Hosting: Yes (isHosting flag set)
• Services: None exposed (no open ports, no TLS certificates, no HTTP banner)
• Connection Type: Firewalled/No services

The reverse DNS PTR record resolves to static.128.170.168.204.clients.your-server.de, and forward resolution is confirmed.

THREAT INDICATORS & BLACKLIST STATUS

No active threat indicators were identified:

• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None
• Threat Persistence Days: 0 (not persistently malicious)

One DNSBL listing was detected (of 8 total lists checked), but the overall blacklist count remains zero. The control plane indicates route instability (isRouteStable: false) with no route changes in the last 30 days.

OBSERVATION HISTORY (23 TOTAL OBSERVATIONS)

Historical data spanning multiple observation periods shows:

• Subnet classification consistently rated as "mostly_clean" with abuse density of 1
• No ownership changes detected (0 changes)
• Threat observation count: 1
• No persistent malicious activity detected
• Recent signals (June 2026) maintain low-risk profiles with confidence scores ranging from 0.20 to 0.85

NEIGHBORHOOD ANALYSIS

The /24 subnet (204.168.170.128/24) shows:

• Abuse Density: 0 (low)
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1
• Classification: Mostly clean
• Inherited Risk: 2

No neighboring IPs were detected within the immediate subnet boundary.

RELATIONSHIP GRAPH (27 TOTAL LINKS)

Relationship analysis reveals:

• Multiple "Same Network" associations to CLOUD-HEL1 network entities
• DNS associations to static.128.170.168.204.clients.your-server.de
• No external organizational or certificate entity links beyond the network and DNS namespace

RECOMMENDED ACTIONS

Based on the risk profile, no specific security actions or firewall rules are recommended. The IP maintains a low-risk posture (25/100) with no actionable threat indicators. Standard monitoring is appropriate.

---

BRIEFING SUMMARY: IP 204.168.170.128 is a low-risk Hetzner cloud-hosted endpoint with no active threat indicators. The subnet demonstrates minimal abuse density, and historical observations confirm stable ownership with no persistent malicious activity. No immediate defensive actions required; continue standard monitoring.

THREAT LEVEL: LOW | SOC RECOMMENDATION: Monitor | BLOCK NEEDED: No

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.