# IP Intelligence Briefing: 138.201.249.42/32
Classification: Low Risk Infrastructure Node
Date: August 2026
Analysis Tool: IPDebrief Intelligence Platform
---
## Executive Summary
IP 138.201.249.42 is a low-risk cloud compute endpoint operated by Hetzner Online GmbH, a major German hosting provider. The IP demonstrates no malicious activity indicators, no blacklist presence, and no threat relationships. Current risk score is 25, indicating minimal threat posture.
---
## Technical Profile
Infrastructure Classification:
- Organization: Hetzner Online GmbH - Contact Role
- Network: HETZNER-fsn1-dc8 (138.201.249.0/26)
- ASN: 24940 (Hetzner Online GmbH)
- Infrastructure Type: Cloud Compute
- Service Purpose: Firewalled / No Services
Geolocation:
- Country: Germany (DE)
- Region: Saxony
- City: Falkenstein
- Coordinates: 51.17°N, 10.45°E
- Timezone: Europe/Berlin
DNS Resolution:
- PTR Hostname: static.42.249.201.138.clients.your-server.de
- Domain: your-server.de
- Email Authentication: SPF and DMARC records present
- Forward Resolution: Confirmed
---
## Threat Assessment
Risk Indicators:
- Overall Risk Score: 25 (Low)
- Abuse Confidence Score: Not applicable
- Blacklist Count: 0
- DNSBL Listed: 1 of 8 total lists
- Known Campaigns: None detected
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Service Exposure:
- No open ports detected
- No TLS certificates observed
- No HTTP services active
---
## Neighborhood Analysis
Subnet Context: 138.201.249.42/24
- Abuse Density: 0 (Clean classification)
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 0
- Risk Distribution: No high or medium risk neighbors detected
Network Stability:
- Route stability: False
- Operator Score: 0.3478 (Basic)
- Route changes (30d): 0
---
## Historical Observations
Signal History: 19 observations recorded
- Recent Activity: All signals observed August 13, 2026
- Ownership Changes: 0
- Threat Observation Count: 0
- Persistent Malicious Activity: None detected
- Geolocation Validation: Plausible (ICMP blocked - unable to validate)
- Average Ownership Days: Not calculated (new observation period)
---
## Entity Relationships
Associated Entities:
- DNS Association: static.42.249.201.138.clients.your-server.de (repeated association)
- Network Association: HETZNER-fsn1-dc8 (Hetzner network)
No additional organizations, certificates, or correlated IPs identified.
---
## Recommended Actions
Firewall/Security Posture:
No specific blocking or filtering actions required. The IP presents a low-risk profile consistent with legitimate cloud infrastructure operations.
Monitoring Recommendations:
- Monitor for any emergence of open ports or service changes
- Track DNSBL listing count if it increases
- Review historical signal patterns for any anomalous behavior
---
## Conclusion
IP 138.201.249.42 represents a standard cloud compute endpoint within Hetzner's Falkenstein data center infrastructure. The absence of threat indicators, clean neighborhood classification, and established email authentication records indicate benign operational characteristics. No immediate defensive actions required for SOC monitoring or filtering.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | HETZNER-fsn1-dc8 |
| CIDR Block | 138.201.249.0/26 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.42.249.201.138.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.42.249.201.138.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 28% | 1 | 4 |
| geolocation | 30% | 2 | 4 |
| Overall | 26% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-10 11:19:29 UTC |
| Last Seen | 2026-09-02 06:34:41 UTC |
| Profile Built | 2026-09-02 06:40:36 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 32 |
Full dossier details are available via our API.