195.201.22.39📋 Copy

## IP INTELLIGENCE BRIEFING: 195.201.22.39

Classification: LOW RISK INFRASTRUCTURE ASSET

Date: 2026-06-15

---

EXECUTIVE SUMMARY

IP address 195.201.22.39 is a low-risk infrastructure resource operated by Hetzner Online GmbH, associated with their Nuremberg (DE) cloud infrastructure (CLOUD-NBG1). The IP demonstrates stable routing patterns, no malicious threat indicators, and belongs to a clean neighborhood subnet. No immediate defensive action required.

---

OWNERSHIP & GEOSOCIAL DATA

• Organization: Hetzner Online GmbH - Contact Role
• ASN: 24940 (Hetzner)
• Network Block: 195.201.16.0/21
• BGP Prefix: 195.201.0.0/16
• Geolocation: Nuremberg, Bavaria, Germany (DE)
• Coordinates: 51.17°N, 10.45°E
• Registration: RIPE NCC
• Infrastructure Type: Cloud Computing / Hosting

---

RISK ASSESSMENT

Control Plane Indicators:

• Route Stability: Stable (0 changes in 30 days)
• MoAS Count: 1 (Multi-Origin AS)
• DNSSEC Valid: Yes
• Origin AS: 24940 via AS6939 (Hurricane Electric)

---

NETWORK & SERVICE PROFILE

• Network Role: Cloud Provider / Hosting Infrastructure
• Connection Type: Cloud Compute
• Open Ports: None (Firewalled / No Services)
• DNS PTR: static.39.22.201.195.clients.your-server.de
• Forward Resolution: mail.skeith.net
• Email Auth: SPF and DMARC records present

---

THREAT INTELLIGENCE

Current Threat Indicators: None

• No threat feed matches
• No known campaigns associated
• No banner or certificate correlations
• No persistent malicious activity detected

DNSBL Status: Listed on 1 of 8 DNSBL lists (minor listing, requires context)

---

OBSERVATION HISTORY

Total Signals Observed: 21

• ASN History: Stable allocation since 2002-06-03 (8,778 days)
• Route Stability: No route changes in 30-day window
• Infrastructure Classification: Consistently identified as CloudCompute
• Provider Consistency: Hetzner throughout observation period
• Operator Score: 0.2609 (Basic)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: False
• Threat Observation Count: 1 (historical, non-ongoing)

---

RELATIONSHIP GRAPH

DNS Associations:

• static.39.22.201.195.clients.your-server.de (multiple associations)

Network Relationships:

• CLOUD-NBG1 (network block)
• 32 total relationship entities

---

NEIGHBORHOOD ANALYSIS (195.201.22.0/24)

• Abuse Density: 0 (Clean)
• Classification: Mostly Clean
• Active Siblings: 0
• Threat Siblings: 1 (historical)
• Risk Distribution: No high/medium risk neighbors detected

---

RECOMMENDATIONS

SOC Analyst Action: Monitor only; no blocking recommended.

This IP represents legitimate cloud infrastructure from Hetzner's Nuremberg data center. The absence of open ports and services, combined with stable routing and clean threat indicators, indicates this is a standard infrastructure endpoint rather than an active threat actor. The single DNSBL listing is likely a minor false positive or non-critical listing that does not warrant blocking.

Firewall Rule Recommendation: Allow (no action needed)

Alerting Threshold: Monitor for any new threat indicators or behavioral changes

---

Data Source: IPDebrief Intelligence Platform

Confidence Level: High

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.