78.41.207.197
Intelligence Briefing: IP 78.41.207.197
Assessment: Low Risk
Risk Score: 0
Ownership and Geolocation:
The IP address was associated with ASN 62370 (SNEL-MNT) under RIR Ripe. Registration details linked the address to the netname NL-SNEL-SERVER-323. Geolocation data placed the asset in the Netherlands (Amsterdam) with a consensus accuracy radius of 150km and a timezone of Europe/Amsterdam.
Threat Indicators:
Threat analysis revealed zero blacklist entries and no known campaign associations. Boolean flags for Tor exit nodes, known attackers, and spam sources were all false. The address showed no active indicators of compromise or reputation sources.
Network Role and Services:
Network role classification listed the provider as Tor Exit Nodes, though the specific Tor exit node flag was false. The system purpose was identified as a Single-Service Host. Service scanning detected an open SSH port (22/tcp) running OpenSSH 10.0p2 Debian. DNS records resolved to qlatl3eb.hosted-by-snel.com with one forward hostname confirmed.
Control Plane:
Control plane data indicated an origin ASN of 62370 with a BGP prefix of 78.41.207.0/24. No anycast or cloud infrastructure was detected.
Recommendation:
No immediate defensive action is required. The IP maintains a zero risk score with no observed malicious activity. Standard monitoring is advised.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | SNEL-MNT |
| ASN | AS62370 |
| Network Name | NL-SNEL-SERVER-323 |
| CIDR Block | 78.41.207.197/32 |
| RIR | RIPE |
| Country | NL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | qlatl3eb.hosted-by-snel.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | qlatl3eb.hosted-by-snel.com |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_10.0p2 Debian-7+deb13u4 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 44% | 2 | 5 |
| routing | 38% | 3 | 4 |
| services | 37% | 2 | 4 |
| ownership | 48% | 3 | 8 |
| reputation | 47% | 1 | 13 |
| geolocation | 35% | 2 | 3 |
| Overall | 41% | 13 | 37 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-21 01:54:48 UTC |
| Last Seen | 2026-09-03 03:07:47 UTC |
| Profile Built | 2026-09-02 13:39:59 UTC |
| Data Freshness | Live |
| Signal Types | 31 |
| Total Observations | 59 |
Full dossier details are available via our API.