138.199.144.166📋 Copy

## IP Intelligence Briefing: 138.199.144.166

Classification: Low Risk - Commercial Cloud Hosting Infrastructure

Date: Current Intelligence Cycle

Executive Summary

IP address 138.199.144.166 is a Hetzner Cloud computing host located in Falkenstein, Saxony, Germany. The asset presents a low-risk profile (risk score: 25) with no active threat indicators. Infrastructure is associated with legitimate cloud hosting provider Hetzner Online GmbH (ASN 24940). No firewall blocking is currently recommended.

Ownership and Network Classification

• Organization: Hetzner Online GmbH - Contact Role
• ASN: 24940 (Hetzner Online GmbH)
• Network: CLOUD-FSN1 (138.199.144.0/20)
• Geolocation: Falkenstein, Saxony, Germany (51.17°N, 10.45°E)
• Infrastructure Type: CloudCompute
• Network Role: Single-Service Host / Cloud Provider
• Classification Flags: Cloud: Yes, Hosting: Yes, CDN/VPN/Proxy/Tor: No

Threat Assessment

• Reputation Score: 25/100 (Low Risk)
• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Status: Not flagged as spam source; 0 blacklist count
• DNSBL Presence: Listed on 1 of 8 DNSBLs (likely administrative/reputation feed)
• Campaign Correlation: None

Technical Services Observed

• Open Ports: TCP/22 (SSH)

- Banner: SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.2

- Indicates Ubuntu-based cloud instance with standard SSH access

• DNS Resolution: static.166.144.199.138.clients.your-server.de

- Domain: your-server.de

- Forward Confirmed: Yes

- Email Authentication: SPF and DMARC records present

• TLS/HTTP: No TLS certificates or HTTP services detected at time of scan

Neighborhood Analysis

• Subnet: 138.199.144.166/24
• Abuse Density: 0 (minimal subnet-wide abuse)
• Risk Distribution: No high-risk neighbors detected
• Subnet Classification: Mostly clean

Observation History

• Total Observations: 23 signals recorded
• Timeline: Activity observed between 2026-06-16 and 2026-06-21
• Risk Trend: Stable low-risk profile across observation window
• Operator Score: 0.3478 (Basic)
• Route Stability: Not route-stable (route changes detected)

Relationship Graph

• Total Relationships: 32
• Primary Associations:

- DNS Association: static.166.144.199.138.clients.your-server.de

- Network Association: CLOUD-FSN1 (same network)

• Correlated IPs: None identified in threat campaigns

Recommended Security Actions

• Firewall Rules: None required
• Blocking Recommendation: No action recommended
• Monitoring Level: Standard monitoring appropriate
• Risk-Based Decision: The IP represents legitimate cloud hosting infrastructure with no active malicious indicators. No blocking is warranted at this time.

Intelligence Notes

The IP is associated with Hetzner's cloud infrastructure, a reputable German hosting provider. The single DNSBL listing appears to be administrative rather than threat-based. SSH access is standard for cloud instances. No evidence of command-and-control activity, malware distribution, or abuse campaigns. SOC teams may track the IP as part of normal cloud infrastructure monitoring but no immediate threat response is indicated.

---

*Intel generated via IPDebrief platform analysis. All data sourced from active IP reputation feeds and geolocation services.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.