95.182.97.39📋 Copy

# IP INTELLIGENCE BRIEFING: 95.182.97.39/32

Classification: LOW RISK | Date: 2026-06-25

## Executive Summary

IP 95.182.97.39 is a low-risk web server endpoint operating within the 95.182.97.0/24 subnet under ASN 56971 (MNT-NETART). Current risk assessment scores 25/100. No active threat indicators observed, with zero blacklist enumerations. The subnet maintains a clean abuse classification (0% abuse density).

## Risk Profile

## Technical Characteristics

Geolocation: France (FR) – Montserrat region (750km accuracy radius)

Network Role: Web Server (gws server fingerprint)

ASN: 56971 (CloudBackbone network)

RIR: Ripe

Route Status: Stable (0 changes in 30 days)

Open Ports:

• TCP/443 (HTTPS) – Active
• TCP/22 (SSH) – Active (OpenSSH_8.9p1 Ubuntu)

DNS Configuration:

• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Authentication: No SPF, No DMARC
• DNSSEC: Valid
• DNSBL: 1/8 lists

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy/VPN: No
• Known Campaigns: None detected
• Blacklist Count: 0
• Pulsedive Risk: N/A

## Related Infrastructure

Relationship Graph: 23 relationships identified to CloudBackbone network infrastructure

Neighborhood (95.182.97.0/24): 2 total siblings, 1 active

Neighbor IP: 95.182.97.162 (Risk Score: 0)

Subnet Abuse Density: 0%

## Historical Trends

22 observations recorded since tracking began. No persistent malicious activity detected. Threat observation count: 0. Ownership changes: 0. The IP maintains consistent service behavior with 301 HTTP redirects and HTTP/2 enabled.

## Recommended Actions

Immediate Action: No blocking required

Firewall Rules: None recommended

Monitoring Priority: Low

Rationale: The IP presents standard web server behavior with minimal risk characteristics. However, the presence of SSH access (port 22) and the "invalid2.invalid" TLS certificate configuration warrants continued observation. No immediate threat justification exists for defensive action.

SOC Guidance: Monitor for any changes in service behavior or threat indicator emergence. No current evidence of malicious activity or compromised infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.