## Threat Intelligence Briefing: 195.201.215.13/32
Date: 2026-08-13
Classification: Low Risk Infrastructure
Executive Summary
IP 195.201.215.13 is identified as a legitimate cloud hosting endpoint operated by Hetzner Online GmbH. The IP presents no malicious threat indicators and is classified as Low Risk. No immediate blocking or filtering action is recommended.
Risk Assessment
- Risk Score: 0.0 (Low Risk)
- Provider Score: 0.0
- Authority Score: 0.0
- Abuse Confidence Score: N/A
- Blacklist Status: Not listed on any threat feeds
- Known Campaign Involvement: None detected
Ownership and Network Context
| Attribute | Value |
|---|---|
| ASN | 24940 |
| Organization | Hetzner Online GmbH - Contact Role |
| Network | DE-HETZNER-20120425 |
| CIDR Block | 195.201.0.0/16 |
| RIR | RIPE |
Geolocation
- Country: Germany (DE)
- Region: Bavaria
- City: Nuremberg
- Coordinates: 51.17°N, 10.45°E
- Geo Plausibility: Validated
Network Role and Classification
- Infrastructure Type: Cloud Compute
- Hosting Provider: Yes
- CDN: No
- VPN/Proxy: No
- Tor Exit Node: No
- Mobile/Residential: No
Observed Services
| Port | Protocol | Service |
|---|---|---|
| 80 | TCP | HTTP |
| 443 | TCP | HTTPS |
| 22 | TCP | SSH |
Additional Observations:
- Server software: Apache
- TLS Certificate: DigiCert (CN=*.your-server.de)
- DNS Resolution: www506.your-server.de
- HTTP Status: 404 (not found)
- HTTP/2: Enabled
Threat Indicators
- No malicious activity detected in observation history
- No known attack campaigns correlated
- No spam or abuse indicators
- No threat feed matches
Neighborhood Analysis
- Subnet: 195.201.215.13/24
- Abuse Density: 0%
- Threat Neighbors: 0
- High Risk Neighbors: 0
- Medium Risk Neighbors: 0
Historical Observations
- Total Signals: 18 observations
- Threat Persistence: None detected
- Ownership Changes: 0
- Geographic Consistency: Stable (Germany)
- Risk Trend: No increase in malicious activity
Related Entities
- Associated Hostname: www506.your-server.de
- Network Relationship: DE-HETZNER-20120425 (Hetzner)
Recommended Actions
No filtering or blocking actions recommended. The IP demonstrates standard hosting provider characteristics with no malicious indicators.
Analyst Notes
This IP is a legitimate Hetzner cloud hosting server. The infrastructure shows normal web hosting behavior with Apache web server and standard HTTPS/SSH services. No threat intelligence signals indicate malicious activity. The IP should be treated as benign infrastructure in security operations contexts.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | DE-HETZNER-20120425 |
| CIDR Block | 195.201.0.0/16 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | www506.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | www506.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache |
| HTTP Title | โ |
| SSH Version | SSH-2.0-mod_sftp ?o???D?????*&3??curve448-sha512,curve25519-sha256,diffie-hellman-group-exchange-sh |
๐ TLS Certificate
| SANs | *.your-server.deyour-server.de |
| Valid From | 2025-10-10T00:00:00+00:00 |
| Valid Until | 2026-11-02T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 388 days |
| Serial Number | 0B6BC13677DD1CF6101E67E2AEB58D11 |
| Thumbprint | 2409AAE2DEB39FACC2D7A23F8A01627922A0E608 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-08 22:39:07 UTC |
| Last Seen | 2026-08-30 21:58:01 UTC |
| Profile Built | 2026-08-31 00:21:38 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 29 |
Full dossier details are available via our API.